Johannes Malsam
Principal Software Engineer at Red Hat
Greater Munich Metropolitan Area Germany
Summary
🤩
Rockstar🎓
Top SchoolJohannes Malsam is a Principal Software Engineer at Red Hat with six years of hands-on experience building and operating cloud-native security and managed service offerings for Kubernetes, notably Red Hat Advanced Cluster Security (formerly StackRox). He specializes in backend and operator development, CI/CD, and runtime security—adding features like pprof profiling, heap-dump controls, and Kubernetes-version-aware pod security handling to production systems. Previously he architected multi-cloud big data platforms for automotive R&D (storing >2PB) and implemented search, RBAC, Spark clusters, and GDPR-aligned processes. Johannes blogs at go-cloud-native.com on Kubernetes, Go, and DevOps practices, and contributes upstream to the StackRox/stackrox project, blending product-focused engineering with open-source stewardship. Based in the Greater Munich area, he brings a pragmatic mix of security-first design and operational experience across large-scale, regulated environments.
6 years of coding experience
10 years of employment as a software developer
Bachelor of Science - BS, Computer Science, Bachelor of Science - BS, Computer Science at OTH Regensburg
Github Skills (12)
security10
k8s-operator10
kubernetes10
container10
docker10
go10
operator-sdk10
dockers10
cicd10
kubernetes-pods10
operator10
profiling9
Programming languages (3)
Github contributions (5)
stackrox/stackrox
May 2022 - Jan 2023
The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.
Role in this project:
Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:202 reviews, 10 commits, 92 PRs in 8 months
Contributions summary:Johannes primarily contributed to the back-end and operator aspects of the Kubernetes security platform, making changes to image flavors, operator configurations, and profiling tools. They modified image defaults, specifically concerning the `stackrox.io` flavor and visible image names. The user also added a pprof profiling option to the operator, including memory threshold configuration and heap dump functionality. Furthermore, they modified central database configurations and updated CI/CD scripts to handle pod security policies based on Kubernetes versions.
containerscheckliststackroxsecurityrisk
johannes94/release
Sep 2022 - Oct 2024
Contributions:12 pushes, 5 branches in 2 years 2 months
kubernetesopenshifttooling
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.