name: Usman Malik
experience: 15+ years in Linux/UNIX, Cloud Native, Security
focus:
- Private cloud for critical infrastructure (energy, regulated, sovereign workloads)
- Bare metal & virtualization (Ironic, Metal3, metal-operator, KubeVirt, Cloud Hypervisor, KVM)
- Kubernetes platforms, operators, and edge orchestration
- L3 networking - BGP-to-Host, unnumbered BGP, ECMP-based load balancers
- Supply chain security - Sigstore, Cosign, SLSA, SBOM, in-toto
- DevSecOps, policy-as-code, compliance (ISO 27001, VDS 3473, NIS2, KRITIS)
- Security research, bug bounty, digital forensics, incident response
- Open source contributions across CNCF & sovereign cloud (NeoNephos)
education:
- MSc Digital Investigation & Forensic Computing
fun_fact: "I read RFCs, kernel changelogs, and CVE feeds for fun."
Streaming & Messaging
API Gateways
Identity & Zero Trust
Multi-Cluster & Fleet
Chaos Engineering
CI/CD & Tooling
$ whoami --security
Architect
Critical Infrastructure # private cloud & platforms for energy / regulated sectors
Bug Bounty Hunter # responsible disclosure across web & infra targets
Pentester # network, host, cloud, container & Kubernetes hardening
Digital Forensics # incident response, container & host forensics, eDiscovery
Threat Modeling # STRIDE, attack surface mapping, zero-trust architectures
DevSecOps Engineer # shift-left CI/CD: SAST/DAST, secret scanning, IaC scanning,
# image signing (Sigstore/Cosign), SLSA provenance, SBOM (CycloneDX/SPDX),
# admission control (Kyverno, OPA/Gatekeeper), runtime (Falco, Tetragon)
Compliance # ISO 27001, VDS 3473, BSI IT-Grundschutz, NIS2, KRITIS,
# ISMS lead, audit prep, risk assessments, SoA, control mapping
- Contributed across CNCF projects: Carvel, Harbor, KubeVirt, Cluster API providers, CloudNativePG, Kairos, kube-ovn, kapp-controller, cert-manager, Prometheus community.
- Talos Linux / Sidero Labs
- Red Hat Accelerator Program member (2023 - present).
- Public speaker, trainer, and consultant on cloud native, security, and platform engineering.
If my open source work has helped you, you can support me here.
