Juan Osorio
Principal Engineer at Stacklok
Helsinki, Finland
Summary
🤩
Rockstar🎓
Top SchoolJuan Osorio is a Principal Engineer with 15 years of experience specializing in cloud, security, and compliance for Kubernetes/OpenShift and large-scale cloud platforms. Based in Helsinki, he blends hands-on engineering with strategic security leadership, currently shaping cloud and AI security at Stacklok after senior roles at Equinix and Red Hat. A prolific open-source contributor, Juan has materially improved projects like ComplianceAsCode, Open Policy Agent, the Security Profiles Operator, and Kolla—often focusing on deployment automation, operator testing, and TLS/identity integrations. He is noted for practical improvements that bridge developer workflows and production security, such as adding UNIX domain socket support to OPA and integrating selinux controllers into SPO. Equally comfortable in low-level C kernel work and high-level operator/controller development, he brings a developer-first, upstream-first approach to platform security.
15 years of coding experience
12 years of employment as a software developer
B.S. Computer Science and Technology, B.S. Computer Science and Technology at Tecnológico de MonterreyB.S. Computer Science, B.S. Computer Science at Aalto University
English, Spanish, Finnish
Github Skills (65)
security-hardening10
plugin-development10
bash10
security-automation10
security10
automation10
automation-testing10
ansible-galaxy10
fluentd10
drupal-module10
develop10
puppet10
sec10
kubernetes-operator10
dockers10
Programming languages (25)
Github contributions (5)
openstack-archive/tripleo-heat-templates
Oct 2015 - Mar 2019
Heat templates for deploying OpenStack
Role in this project:
DevOps Engineer
DevOps EngineerContributions:409 commits, 2 PRs in 3 years 6 months
Contributions summary:Juan primarily focuses on infrastructure and configuration management within the TripleO Heat Templates repository. Their contributions involve modifying Puppet manifests to address dependencies and service configurations for OpenStack components such as Ceilometer, Keystone, and Cinder. They also added a FreeIPA server installation script, modified existing scripts to streamline CI workflows, and enhanced the validation of template files. These changes suggest a focus on automation, environment setup, and ensuring the smooth deployment of OpenStack services.
deployingheatopenshiftopenstack
kubernetes-sigs/security-profiles-operator
Dec 2020 - Sep 2022
The Kubernetes Security Profiles Operator
Role in this project:Backend & DevOps Engineer
Backend & DevOps EngineerContributions:426 reviews, 100 commits, 148 PRs in 1 year 9 months
Contributions summary:Juan integrated the selinux-operator into the Security Profiles Operator (SPO) by incorporating its controllers and setting them up in the codebase. They addressed the deployment context by creating two managers in the main function to handle daemonset and Selinux controllers. Furthermore, the user enabled e2e tests to run on OpenShift clusters and implemented conditions in the SelinuxPolicy Custom Resource. The user's work included preventing the removal of the SelinuxPolicy finalizer until ConfigMap deletion, and added a simple e2e test for Selinux functionality.
apparmorseccomp-profilesseccompk8s-sig-nodesecurity-profiles
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.