Jia Tan
Staff Security Engineer at Pure Storage
California, United States
Summary
🤩
Rockstar🎓
Top SchoolJia Tan is a Staff Security Engineer with 11 years of experience building secure, production-grade systems across Google, Roblox, Snowflake, and now Pure Storage, specializing in cloud and container security, identity, and security data pipelines. She has led cross-team projects for vulnerability management, FedRAMP-ready container controls, workload identity (SPIFFE) adoption, and enterprise SIEM/security data lake designs, combining deep distributed-systems coding skills with practical cloud expertise on GCP and AWS. Notably, she contributed AWS-specific identity and authorization enhancements to the high-profile Istio service mesh, improving credential handling and node agent security. Jia pairs strong technical leadership with clear communication, shipping multi-quarter initiatives that bridge engineering, compliance, and operations.
11 years of coding experience
9 years of employment as a software developer
Master’s Degree Computational Science and Engineering, Master’s Degree Computational Science and Engineering at Georgia Institute of TechnologyBachelor of Science in Engineering Electric and Computer Engineering, Bachelor of Science in Engineering Electric and Computer Engineering at Shanghai Jiao Tong University
English, German
Github Skills (15)
it-security10
service-mesh10
kubernetes10
go10
aws10
kubernetes-pods10
security10
api-design9
authorization9
pkcs9
user-authentication9
api9
authentication9
authorizations9
apim9
Programming languages (13)
Github contributions (5)
istio/istio
Oct 2017 - Feb 2018
Connect, secure, control, and observe services.
Role in this project:
Security Engineer
Security EngineerContributions:11 commits, 10 PRs, 3 pushes in 4 months
Contributions summary:Jia primarily contributed to the security aspects of the Istio service mesh project. They integrated AWS-specific security features into the node agent, including the implementation of AWS instance identity document retrieval, signature verification, and integration with the PKCS7 format. Additionally, the user added service account-based authorization and a registry-based authorizer. These modifications enhanced the project's security posture by providing secure credential management and access control.
circuit-breakerenforce-policiesistioapi-managementmicroservice
crazytan/.dotfiles
Oct 2015 - Apr 2018
Contributions:84 commits, 83 pushes, 1 branch in 2 years 5 months
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.