Platform engineers who have built tools for secure workload and service access nerd out with Ori Shoshan on access controls, Kubernetes, and platform engineering. We dig into the motivations behind building their access control tools, lessons learned, get some hot takes on Kubernetes and platform engineering, and most of all, have fun!
First Person Platform E04 - Ian Evans on security as an enabler for financial institutions
Security architect Ian Evans shares how security can enable financial institutions by balancing speed with strong security practices and leveraging declarative access controls.
12 Aug 2024
First Person Platform E03 - Jack Kleeman on PCI & Zero-trust with network policies at Monzo
Joining me this time is Jack Kleeman (https://www.linkedin.com/in/jackkleeman/). Jack is a staff engineer at Restate, where they make durable execution just work. Before that, Jack worked at Apple as a Senior SRE and at Monzo as a Senior Platform Engineer. At Monzo, Jack led projects on secret distribution, certificate management, network isolation, and Cassandra authentication, including the effort to achieve zero-trust on Kubernetes using network policies at Monzo (https://monzo.com/blog/we-built-network-isolation-for-1-500-services), which we'll be digging into in this episode, including the motivations - PCI and zero-trust, and how they tackled scaling it from one sensitive service, the ledger, to the entire organization, as well as Jack's experiencing moving from writing primarily in Go to Rust.
Monzo blog post mentioned in the episode: We built network isolation for 1,500 services to make Monzo more secure (https://monzo.com/blog/we-built-network-isolation-for-1-500-services)
Apple Pkl: https://github.com/apple/pkl (https://github.com/apple/pkl)
You can get in touch with Jack on LinkedIn (https://www.linkedin.com/in/jackkleeman/), or his preferred medium, Twitter (https://x.com/jackkleeman?lang=en)!
15 Apr 2024
First Person Platform E02 - Andrew Moore on Uber Workload Identity and Authorization
Joining me for this second episode is Andrew Moore (https://www.linkedin.com/in/andrew-smore/). Andrew is a Staff Software Engineer leading the Platform Authentication team at Uber and sits on the SPIFFE Steering Committee. Prior to Uber, Andrew was a Software Engineer for various US and foreign Defense and Civil contracts with Lockheed Martin, Leidos, and Earth Resources Technology. Outside of work, Andrew homebrews beer, mead, kombucha, and Dungeons and Dragons campaigns.
In this episode, we’ll be talking about Uber’s use of SPIFFE/SPIRE and Charter for Workload Identity and Authorization. Learn about the design choices, motivations, and lessons learned that led to this setup. Plus, we’ll chat about Kubernetes, how to keep an abstract design mindset over a particular tech choice, and fads and fashion in software fads, and sprinkle in some hot takes and anime references for fun! ;)
Uber blog posts mentioned in the podcast:
https://www.uber.com/blog/our-journey-adopting-spiffe-spire/ (https://www.uber.com/blog/our-journey-adopting-spiffe-spire/)
https://www.uber.com/blog/attribute-based-access-control-at-uber/ (https://www.uber.com/blog/attribute-based-access-control-at-uber/)
https://www.uber.com/blog/go-monorepo-bazel/ (https://www.uber.com/blog/go-monorepo-bazel/)
You can get in touch with Andrew on the SPIFFE Slack (https://spiffe.io/docs/latest/spiffe-about/get-involved/), or on LinkedIn (https://www.linkedin.com/in/andrew-smore/).
24 Jan 2024
First Person Platform E01 - Andrew Fong on Dropbox Grouper
Joining me for this first episode is Andrew Fong (https://www.linkedin.com/in/andrewfong/), the co-founder and CEO of Prodvana (https://prodvana.io), and previously, VP Engineering Infrastructure at Dropbox. Andrew was in Infrastructure Engineering during the creation of Dropbox Grouper, and before then, was an SRE at YouTube and AOL.
During this episode, we’ll be talking about Dropbox Grouper, the story and motivations behind building it, as well as funny and interesting stories from Andrew’s time at YouTube.
We dig into the cultural shift in platform and security, where developer experience is being prioritized, and the tension that creates in the organization, as well as AI and how it’s going to be affecting Platform Engineering.
Host of First Person Platform?
Claim your podcast to manage its listing and keep your show details accurate.
Pod Engine is an independent podcast discovery and analytics service and is not affiliated with or endorsed by this podcast. Artwork and show content belong to their owners. Full legal notice.
