Matthew Rogers
Senior Software Engineer at Red Hat
Raleigh-Durham-Chapel Hill Area United States
Summary
🤩
RockstarMatthew Rogers is a Senior Software Engineer with 14+ years of open source experience building security-focused infrastructure, authentication, and compliance systems at Red Hat and across projects like OpenShift, libreswan, and MIT krb5. He architects and implements Kubernetes operators, cloud installer/bootstrapping components, and authentication/authorization services for OpenShift Container Platform 4, with hands-on expertise in Go, C, Python, and Bash. His contributions to high-profile repos (openshift/installer, oauth-proxy, libreswan) reflect deep domain knowledge in x509, AAA, Kerberos, and standards compliance as well as pragmatic fixes for security vulnerabilities and certificate handling. A frequent KubeCon presenter and freedom/Open Source evangelist, he combines systems-level security engineering with DevOps rigor, automated e2e testing, and SCAP/CIS compliance work. Uncommonly, he pairs this engineering practice with avant-garde media design, signaling a creative approach to complex technical problems. Matthew is open to full-time remote roles in the U.S. with organizations that respect liberty, privacy, and individual rights.
14 years of coding experience
Github Skills (57)
ldap10
kubernetes10
docker10
cert10
kerberos10
sec10
testing10
ipsec10
it-security10
http10
test-framework10
bootstrapping10
security-automation10
c-programming10
dockers10
Programming languages (8)
Github contributions (5)
openshift/oauth-proxy
Oct 2017 - Feb 2019
A reverse proxy that provides authentication with OpenShift via OAuth and Kubernetes service accounts
Role in this project:
Back-end Developer & DevOps Engineer
Back-end Developer & DevOps EngineerContributions:56 commits, 48 PRs, 24 pushes in 1 year 5 months
Contributions summary:Matthew primarily contributed to the OpenShift oauth-proxy project by fixing bugs, adding unit tests, and enhancing the end-to-end (e2e) testing framework. Their work included resolving a fsnotify deadlock, updating login template text, and adding test cases for email validation and certificate pool retrieval. The user also implemented the `--bypass-auth-except-for` option and associated e2e tests. They also incorporated vendor updates and ran end-to-end tests in Travis-CI, demonstrating DevOps skills.
kubernetes-serviceproxyauthenticationopenshiftreverse-proxy
ComplianceAsCode/content
Jan 2020 - Oct 2022
Security automation content in SCAP, Bash, Ansible, and other formats
Role in this project:DevOps Engineer & Security Engineer
DevOps Engineer & Security EngineerContributions:49 reviews, 70 commits, 59 PRs in 2 years 9 months
Contributions summary:Matthew primarily contributed to the automation and security aspects of the repository. They developed a helper script for creating platform checks and updated the script. The user implemented e2e tests for platform compliance and CIS remediations within the OpenShift environment, leveraging MachineConfigs and KubeletConfigs. The user's work also extended to include the addition of security rules related to ingress controller certificates and FedRAMP compliance.
compliancecpescapsecurity-hardeningnessus
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.