Platform engineers who have built tools for secure workload and service access nerd out with Ori Shoshan on access controls, Kubernetes, and platform engineering. We dig into the motivations behind building their access control tools, lessons learned, get some hot takes on Kubernetes and platform engineering, and most of all, have fun!
First Person Platform
Claim This Podcastby Otterize
4 episodes
Updated Weekly
Accepts GuestsHas SponsorsLocation 🇬🇧
Podcast Overview
Platform engineers who have built tools for secure workload and service access nerd out with Ori Shoshan on access controls, Kubernetes, and platform engineering. We dig into the motivations behind building their access control tools, lessons learned, get some hot takes on Kubernetes and platform engineering, and most of all, have fun!
Language
🇺🇲
Publishing Since
1/24/2024
3 verified contact emails on file for First Person Platform
Pitch yourself as a guest, propose sponsorships, or reach out directly to the host.
Recent Episodes
December 10, 2024
First Person Platform E04 - Ian Evans on security as an enabler for financial institutions
Security architect Ian Evans shares how security can enable financial institutions by balancing speed with strong security practices and leveraging declarative access controls.
August 12, 2024
First Person Platform E03 - Jack Kleeman on PCI & Zero-trust with network policies at Monzo
<p>Joining me this time is <a href="https://www.linkedin.com/in/jackkleeman/"><strong>Jack Kleeman</strong></a>. Jack is a staff engineer at Restate, where they make durable execution just work. Before that, Jack worked at Apple as a Senior SRE and at Monzo as a Senior Platform Engineer. At Monzo, Jack led projects on secret distribution, certificate management, network isolation, and Cassandra authentication, including the effort to <a href="https://monzo.com/blog/we-built-network-isolation-for-1-500-services"><strong>achieve zero-trust on Kubernetes using network policies at Monzo</strong></a>, which we'll be digging into in this episode, including the motivations - PCI and zero-trust, and how they tackled scaling it from one sensitive service, the ledger, to the entire organization, as well as Jack's experiencing moving from writing primarily in Go to Rust.</p><p><br></p><p>Monzo blog post mentioned in the episode: <a href="https://monzo.com/blog/we-built-network-isolation-for-1-500-services"><strong>We built network isolation for 1,500 services to make Monzo more secure</strong></a></p><p>Apple Pkl: <a href="https://github.com/apple/pkl">https://github.com/apple/pkl</a></p><p><br></p><p><br></p><p>You can get in touch with Jack on <a href="https://www.linkedin.com/in/jackkleeman/">LinkedIn</a>, or his preferred medium, <a href="https://x.com/jackkleeman?lang=en">Twitter</a>!</p>
April 15, 2024
First Person Platform E02 - Andrew Moore on Uber Workload Identity and Authorization
<p>Joining me for this second episode is <a href="https://www.linkedin.com/in/andrew-smore/">Andrew Moore</a>. Andrew is a Staff Software Engineer leading the Platform Authentication team at Uber and sits on the SPIFFE Steering Committee. Prior to Uber, Andrew was a Software Engineer for various US and foreign Defense and Civil contracts with Lockheed Martin, Leidos, and Earth Resources Technology. Outside of work, Andrew homebrews beer, mead, kombucha, and Dungeons and Dragons campaigns.</p><p><br></p><p>In this episode, we’ll be talking about Uber’s use of SPIFFE/SPIRE and Charter for Workload Identity and Authorization. Learn about the design choices, motivations, and lessons learned that led to this setup. Plus, we’ll chat about Kubernetes, how to keep an abstract design mindset over a particular tech choice, and fads and fashion in software fads, and sprinkle in some hot takes and anime references for fun! ;)</p><p><br></p><p>Uber blog posts mentioned in the podcast:</p><p><a href="https://www.uber.com/blog/our-journey-adopting-spiffe-spire/">https://www.uber.com/blog/our-journey-adopting-spiffe-spire/</a> <br> <a href="https://www.uber.com/blog/attribute-based-access-control-at-uber/">https://www.uber.com/blog/attribute-based-access-control-at-uber/</a><br> <a href="https://www.uber.com/blog/go-monorepo-bazel/">https://www.uber.com/blog/go-monorepo-bazel/</a></p><p><br></p><p>You can get in touch with Andrew on the <a href="https://spiffe.io/docs/latest/spiffe-about/get-involved/">SPIFFE Slack</a>, or on <a href="https://www.linkedin.com/in/andrew-smore/">LinkedIn</a>.</p>
4 total episodes available
Deep-dive analytics for First Person Platform
Frequently asked questions
Have a different question and can't find the answer you're looking for? Reach out to our support team by sending us an email and we'll get back to you as soon as we can.
- What is First Person Platform?
- How often does this podcast release new episodes?
This podcast updates weekly.
- Where can I listen to this podcast?
This podcast is available on 8 platforms including Apple Podcasts, Spotify, and more. You can also use the RSS feed directly.
- Does this podcast accept guests?
Information about guest appearances is not available.
Legal Disclaimer
Pod Engine is not affiliated with, endorsed by, or officially connected with any of the podcasts displayed on this platform. We operate independently as a podcast discovery and analytics service.
All podcast artwork, thumbnails, and content displayed on this page are the property of their respective owners and are protected by applicable copyright laws. This includes, but is not limited to, podcast cover art, episode artwork, show descriptions, episode titles, transcripts, audio snippets, and any other content originating from the podcast creators or their licensors.
We display this content under fair use principles and/or implied license for the purpose of podcast discovery, information, and commentary. We make no claim of ownership over any podcast content, artwork, or related materials shown on this platform. All trademarks, service marks, and trade names are the property of their respective owners.
While we strive to ensure all content usage is properly authorized, if you are a rights holder and believe your content is being used inappropriately or without proper authorization, please contact us immediately at hey@podengine.ai for prompt review and appropriate action, which may include content removal or proper attribution.
By accessing and using this platform, you acknowledge and agree to respect all applicable copyright laws and intellectual property rights of content owners. Any unauthorized reproduction, distribution, or commercial use of the content displayed on this platform is strictly prohibited.