Jakub Hrozek
Staff Software Engineer at Stacklok
Stockholm, Sweden
Summary
🤩
Rockstar🎓
Top SchoolJakub Hrozek is a Staff Software Engineer with 17 years of experience building secure, cloud-native infrastructure and identity systems, currently focused on making AI agents and MCP servers easy and secure at Stacklok. He has deep C and Python expertise from long-term upstream stewardship of SSSD and contributions to security-critical projects like FreeIPA, c-ares, and the Kubernetes Security Profiles Operator. At Red Hat he bridged development, compliance, and cross-team collaboration to harden OpenShift and implement operator-driven compliance checks. Comfortable in fully remote, distributed teams across time zones, he blends hands-on bug fixes and refactors with testing and automation skills showcased in ComplianceAsCode and k8s operator work. Jakub’s work repeatedly centers on authentication, authorization, and low-level Linux integration, and he has a knack for squeezing reliability and testability out of legacy C code and complex Kubernetes flows. Based in Stockholm, he brings both upstream maintainer experience and practical downstream packaging and support knowledge to deliver auditable, production-ready security tooling.
17 years of coding experience
18 years of employment as a software developer
Ing/MSC, Information Technology, Ing/MSC, Information Technology at Brno University of Technology
Stackoverflow
59reputation
5kreached
2answers
1question
Github Skills (53)
ldap10
kubernetes10
debug10
docker10
security-hardening10
system-programming10
python10
kerberos10
testing10
it-security10
memory-management10
bash10
security-automation10
go-testing10
c1110
Programming languages (14)
Github contributions (5)
SSSD/sssd
Oct 2009 - Oct 2019
A daemon to manage identity, authentication and authorization for centrally-managed systems.
Role in this project:
Back-end Developer
Back-end DeveloperContributions:1163 commits, 635 PRs, 1583 pushes in 10 years 1 month
Contributions summary:Jakub primarily contributed to the development and maintenance of the SSSD daemon, focusing on enhancing the security of the system and providing authentication and authorization services. The commits demonstrate a focus on improving code robustness by adding const parameters and fixing typos. They also contributed to improving the usability of the codebase by adding utility macros and functions such as a function that will return error messages and refactoring the code for a more maintainable structure. The majority of commits included reviews from other developers, indicating collaboration.
pamyubikeyauthorizationdaemonauthentication
kubernetes-sigs/security-profiles-operator
Jan 2021 - Dec 2022
The Kubernetes Security Profiles Operator
Role in this project:Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:382 reviews, 191 commits, 146 PRs in 1 year 11 months
Contributions summary:Jakub primarily focused on improving the Kubernetes Security Profiles Operator by implementing and refining features related to SELinux integration and testing. Their contributions included addressing race conditions and enhancing the test suite. They also refactored and improved the reliability of the code, including making use of the /ready endpoint, writing files only if they differ, and improving the retry mechanism. The user also took measures to enhance the test's performance.
apparmorseccomp-profilesseccompk8s-sig-nodesecurity-profiles
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.