Juan Osorio
Principal Engineer at Stacklok
Helsinki, Finland
Summary
🤩
Rockstar🎓
Top SchoolJuan Osorio is a Principal Engineer with 15 years of experience specializing in cloud, security, and compliance for Kubernetes/OpenShift and large-scale cloud platforms. Based in Helsinki, he blends hands-on engineering with strategic security leadership, currently shaping cloud and AI security at Stacklok after senior roles at Equinix and Red Hat. A prolific open-source contributor, Juan has materially improved projects like ComplianceAsCode, Open Policy Agent, the Security Profiles Operator, and Kolla—often focusing on deployment automation, operator testing, and TLS/identity integrations. He is noted for practical improvements that bridge developer workflows and production security, such as adding UNIX domain socket support to OPA and integrating selinux controllers into SPO. Equally comfortable in low-level C kernel work and high-level operator/controller development, he brings a developer-first, upstream-first approach to platform security.
15 years of coding experience
12 years of employment as a software developer
B.S. Computer Science and Technology, B.S. Computer Science and Technology at Tecnológico de MonterreyB.S. Computer Science, B.S. Computer Science at Aalto University
English, Spanish, Finnish
Github Skills (65)
security-hardening10
plugin-development10
bash10
security-automation10
security10
automation10
automation-testing10
ansible-galaxy10
fluentd10
drupal-module10
develop10
puppet10
sec10
kubernetes-operator10
dockers10
Programming languages (28)
Github contributions (5)
openstack-archive/tripleo-heat-templates
Oct 2015 - Mar 2019
RETIRED, Heat templates for deploying OpenStack. Mirror of code maintained at opendev.org.
Role in this project:
DevOps Engineer
DevOps EngineerContributions:409 commits, 2 PRs in 3 years 6 months
Contributions summary:Juan primarily focuses on infrastructure and configuration management within the TripleO Heat Templates repository. Their contributions involve modifying Puppet manifests to address dependencies and service configurations for OpenStack components such as Ceilometer, Keystone, and Cinder. They also added a FreeIPA server installation script, modified existing scripts to streamline CI workflows, and enhanced the validation of template files. These changes suggest a focus on automation, environment setup, and ensuring the smooth deployment of OpenStack services.
openstack
ComplianceAsCode/content
Jan 2020 - Aug 2022
Security automation content in SCAP, Bash, Ansible, and other formats
Role in this project:DevOps Engineer & Security Engineer
DevOps Engineer & Security EngineerContributions:388 reviews, 808 commits, 644 PRs in 2 years 7 months
Contributions summary:Juan contributed significantly to automating security content deployment and integration within an OpenShift environment. This included the development of scripts for building datastream images and installing the compliance operator. They also implemented initial end-to-end tests for compliance profiles and integrated support for Kubernetes object remediations. Further contributions focused on enhancing the build process, adding configuration for specific platform resources, and ensuring robust deployment.
ansiblebashsecurity-automationsecuritycompliance
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.