Kairo Araujo
Software Engineer - Open Source Security at Eclipse Foundation
Veldhoven, North Brabant, Netherlands
Summary
🤩
Rockstar🎓
Top SchoolKairo Araujo is a software engineer specializing in open source security with over a decade of hands-on experience and a 20+ year industry background. He builds and architects secure supply-chain tooling—authoring VMware’s Repository Service for TUF and contributing security-hardening fixes to the widely used python-tuf project. Comfortable across cloud-native backends, automation and legacy enterprise systems, he has extended Ansible for AIX, designed CI/CD-integrated services, and driven secure metadata and key-rotation defenses against fast-forward attacks. At the Eclipse Foundation he focuses on automating security best practices and public transparency through dashboards while actively engaging developer communities. Known for solving practical deployment problems, he pairs deep systems knowledge (AIX/PowerVM, Linux, OpenStack) with pragmatic Python engineering to move research and proposals into production.
11 years of coding experience
17 years of employment as a software developer
Gestão em Tecnologia da Informação, Gestão em Tecnologia da Informação at Universidade do Sul de Santa Catarina
English, Portuguese
Stackoverflow
41reputation
1kreached
1answer
2questions
Github Skills (17)
python10
aix10
software-update10
security10
automation10
ansible10
system-administration10
ansible-galaxy10
automations10
certificate-revocation10
testing9
git-repository8
key-management8
package-repository8
mocking6
Programming languages (10)
Github contributions (5)
theupdateframework/python-tuf
Nov 2021 - Oct 2022
Python reference implementation of The Update Framework (TUF)
Role in this project:
Back-end Developer / Security Engineer
Back-end Developer / Security EngineerContributions:97 reviews, 36 commits, 37 PRs in 10 months
Contributions summary:Kairo primarily focused on enhancing the security and robustness of The Update Framework (TUF) implementation in Python. Their work included validating role names within delegation metadata to prevent security vulnerabilities. They improved test coverage and the reliability of the TUF client example, addressing exception handling and simplifying the codebase. The user also addressed fast-forward attack scenarios by implementing key rotation and version rollback mechanisms.
pythonsecuritycompromiserevocationupdate
ansible/ansible
Oct 2017 - Feb 2019
Ansible is a radically simple IT automation platform that makes your applications and systems easier to deploy and maintain. Automate everything from code deployment to network configuration to cloud management, in a language that approaches plain English, using SSH, with no agents to install on remote systems. https://docs.ansible.com.
Role in this project:Back-end Developer
Back-end DeveloperContributions:2 reviews, 8 commits, 8 PRs in 1 year 4 months
Contributions summary:Kairo primarily contributed to the development of AIX-related modules within the Ansible automation platform. Their work involved creating new modules for system administration tasks such as backing up rootvg images and configuring file systems. Furthermore, they implemented enhancements and improvements to existing modules by adding AIX-specific features, including incorporating distribution information and device management facts. Their contributions demonstrate a focus on extending Ansible's capabilities for AIX system administration.
everythingpythonit-automationdevopsdeployment
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.