Everyone wants to be able to have perfect developer autonomy. But how do you keep your developers happy, while ensuring a safe and secure infrastructure?
How do you balance developer velocity with security requirements? Have you faced a similar situation?
In this talk, we explained how we utilized OPA and OPA Gatekeeper to automate policy enforcement on our CICD pipelines for IaC and Kubernetes respectively, thus giving developers their independence back, while maintaining security and peace of mind.
Bnaya Harel is a SecOps Engineer with accomplished experience in Cloud, Kubernetes and managing complex production environments. He is part of Riskified’s SecOps’ team that is responsible for managing and securing all of Riskfied’s Cloud infrastructure, supporting the R&D group with all of their needs. In addition, he leads the Kubernetes and OPA security aspects at Riskified.
Building a data platform is a journey, not a destination. Beyond the work of assembling a set of technologies and building integrations across them, there is also the work of growing and organizing a team that can support and benefit from that platform.
On the latest episode of the Data Engineering Podcast, Inbar Yogev and Lior Winner talk about the journey they’ve been on for their data platform at Riskified. Additionally, they talk about how they’ve set up a guild system for training and supporting data professionals.
‘The whole concept of decision-making is very dear to me — I believe in empowering employees to make their own decisions. As a manager, I try to make as few decisions as possible, and when I do make a decision, I try to understand why it didn’t stop with someone else.’
The podcast HiTech Problems featured our SVP of Engineering, Shai Peretz. Shai has years of experience in building technology departments and leading development teams. He emphasizes giving responsibility and autonomy to teams and implementing Lean/agile methodologies and DevOps culture in organizations.
In this episode, they talked about what we do at Riskified, fraud and how to stop it, developers’ independence and DevOps culture, music and technology, writing technical blogs, having conferences, and a lot more.