Morteza Khazamipour

Kubernetes Platform Engineer · SRE · Platform Security

I work on Kubernetes platforms and the systems around them: Linux, networking, storage, observability, security controls, GitOps workflows, and production operations. My focus is building platforms that engineering teams can safely use, debug, and operate.

What I do

I design, operate, and troubleshoot Kubernetes-based platforms. The work usually sits between infrastructure and developer experience: clusters, access, policies, storage, networking, delivery workflows, monitoring, and incident response.

Kubernetes platform operations

Cluster lifecycle, upgrades, control-plane design, workload placement, node behavior, and day-2 operations.

Networking and service traffic

CNI behavior, Gateway API, service discovery, DNS, MTU, routing, load balancing, and NetworkPolicy troubleshooting.

Storage and stateful workloads

Persistent storage for Kubernetes workloads, Rook-Ceph operations, failure domains, recovery, and storage-related incidents.

Observability and operations

Metrics, logs, traces, dashboards, alerting, capacity signals, and debugging workflows for production platforms.

Kubernetes security

Security is part of the platform work, not a separate checklist. I work on controls that make Kubernetes safer to use without blocking engineering teams from shipping.

Areas I work with

  • RBAC design, service accounts, access boundaries, and namespace isolation
  • Admission policies, policy-as-code, and workload governance
  • NetworkPolicy design and traffic restrictions between workloads
  • Container and image security using Kubernetes-native security tooling
  • Kubernetes hardening, security visibility, and CIS-oriented improvements
CKS RBAC Kyverno RHACS NetworkPolicy CIS Benchmark Admission Control

Tools and systems

I usually work close to these systems and components.

Kubernetes Linux containerd Cilium Gateway API Rook-Ceph Prometheus Grafana Mimir Loki Tempo ArgoCD Terraform Ansible OpenShift GPU workloads

How I work

  • Platform-first I treat Kubernetes as an internal platform that needs ownership, standards, operational paths, and clear boundaries.
  • Production-focused I spend time on the parts that fail in real environments: traffic, DNS, storage, certificates, node behavior, policies, upgrades, and alerts.
  • Debugging-oriented I prefer understanding the actual path of a problem before changing configuration.
  • Automation where it helps I use automation for repeatable operations, safer changes, and reducing manual work.