Sonny Shi
Head Of Product at Stacklet
Los Angeles, California, United States
Summary
🤩
Rockstar🎓
Top SchoolSonny Shi is a product-driven engineering leader with 11 years of experience building secure, cloud-native systems and currently serves as Head of Product at Stacklet. He blends hands-on backend and security engineering with product strategy, having previously progressed from Principal Engineer to product leadership within the same company and brief tenures at Ramp and Hulu. An active open-source maintainer, Sonny contributes to Cloud Custodian—an influential rules engine for cloud security and governance—where his work on Kinesis streams, S3 security, and policy-driven actions reflects deep operational security expertise. He holds a BS in Computer Science Engineering from The Ohio State University and is based in Los Angeles. Uncommonly for a product leader, he still authors production-grade security code, ensuring product decisions are grounded in real-world risk and implementation trade-offs.
11 years of coding experience
8 years of employment as a software developer
High School Diploma, High School Diploma at Lakota East High SchoolBachelor of Science Computer Science Engineering, Bachelor of Science Computer Science Engineering at The Ohio State University
Github Skills (13)
aws-s310
cloud-security10
aws10
amazon-s310
python10
s3-bucket10
security10
yaml9
ias9
kin9
amazon-kinesis9
terraformer8
terraform8
Programming languages (14)
Github contributions (5)
cloud-custodian/cloud-custodian
Aug 2017 - Jan 2023
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Role in this project:
Back-end & Security Engineer
Back-end & Security EngineerContributions:7 releases, 366 reviews, 200 commits in 5 years 6 months
Contributions summary:Sonny's commits primarily focused on improvements related to the Kinesis stream, addressing mailer template fixes and updates to the resource model filtering. Additionally, the user made code modifications to enhance S3 security, including handling permission-denied errors and implementing bucket encryption actions. The user's work demonstrates a blend of back-end development with rule engine logic for cloud security and governance, aligning well with the project's objectives.
gcpquery-filterserverlesscompliancecloud-security
thisisshi/cloud-custodian
Jul 2017 - Feb 2025
Rules engine for AWS management, DSL in yaml for query, filter, and actions on resources
Contributions:4 releases, 3 reviews, 41 PRs in 7 years 8 months
queryquery-filterdslrulesaws
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.