---

whoami

name: Usman Malik
experience: 15+ years in Linux/UNIX, Cloud Native, Security
focus:
  - Private cloud for critical infrastructure (energy, regulated, sovereign workloads)
  - Bare metal & virtualization (Ironic, Metal3, metal-operator, KubeVirt, Cloud Hypervisor, KVM)
  - Kubernetes platforms, operators, and edge orchestration
  - L3 networking - BGP-to-Host, unnumbered BGP, ECMP-based load balancers
  - Supply chain security - Sigstore, Cosign, SLSA, SBOM, in-toto
  - DevSecOps, policy-as-code, compliance (ISO 27001, VDS 3473, NIS2, KRITIS)
  - Security research, bug bounty, digital forensics, incident response
  - Open source contributions across CNCF & sovereign cloud (NeoNephos)
education:
  - MSc Digital Investigation & Forensic Computing
fun_fact: "I read RFCs, kernel changelogs, and CVE feeds for fun."

---

Tech Stack

Languages

Cloud Native & Kubernetes

Private Cloud & Bare Metal

Networking

Cloud & Infrastructure

Observability

Databases

Storage

Supply Chain Security

Security & DevSecOps

AI / GenAI Infrastructure

More

Streaming & Messaging

API Gateways

Identity & Zero Trust

Multi-Cluster & Fleet

Chaos Engineering

CI/CD & Tooling

---

Security Research & Forensics

$ whoami --security

Architect
Critical Infrastructure  # private cloud & platforms for energy / regulated sectors
Bug Bounty Hunter        # responsible disclosure across web & infra targets
Pentester                # network, host, cloud, container & Kubernetes hardening
Digital Forensics        # incident response, container & host forensics, eDiscovery
Threat Modeling          # STRIDE, attack surface mapping, zero-trust architectures
DevSecOps Engineer       # shift-left CI/CD: SAST/DAST, secret scanning, IaC scanning,
                         # image signing (Sigstore/Cosign), SLSA provenance, SBOM (CycloneDX/SPDX),
                         # admission control (Kyverno, OPA/Gatekeeper), runtime (Falco, Tetragon)
Compliance               # ISO 27001, VDS 3473, BSI IT-Grundschutz, NIS2, KRITIS,
                         # ISMS lead, audit prep, risk assessments, SoA, control mapping

---

GitHub Stats

Activity Graph

Contribution Snake

---

Open Source & Community

• Contributed across CNCF projects: Carvel, Harbor, KubeVirt, Cluster API providers, CloudNativePG, Kairos, kube-ovn, kapp-controller, cert-manager, Prometheus community.
• Talos Linux / Sidero Labs
• Red Hat Accelerator Program member (2023 - present).
• Public speaker, trainer, and consultant on cloud native, security, and platform engineering.

---

Support

If my open source work has helped you, you can support me here.