KARTIK JOSHI

Senior SDE II, Microsoft — Upstream Team — Driving upstream open-source development to enhance Kubernetes, container, and cloud platform experiences, with a focus on Azure integration and reliability.

Confidential Containers

Project: Confidential containerized workloads on Kubernetes, with attestation-backed security boundaries, and cloud integrations.

• Designed and implemented the Azure Provisioner for CAA (Go SDK), enabling Azure-native provisioning flows for confidential workloads.
• Worked on the POC of the peer pod approach to overcome the limitation of nested virtualization.
• Contributed to the Azure–Red Hat–Intel collaboration to enhance AI workload security in the public cloud using CoCo

AKS Konnectivity

Project: Control-plane ↔ node connectivity layer that tunnels/proxies traffic for cluster operations at scale.

• Enabled and rolled out the Konnectivity agent autoscaling in production, improving availability and resource efficiency under load.
• Worked on refactoring firewall rules and removing stale rules, which reduced millions of dollars from operational costs.

Azure CloudShell

Project: Managed browser-based Azure terminal environment for cloud tooling and workflows.

• Delivered rootless Docker support, enabling Docker usage without broad root permissions, and improving security posture.
• Contributed to image and pipeline optimization to reduce image size and simplify layering, maintainability. Reduced the base image by approximately 6 GBs.

Headlamp Desktop + Minikube

Project: Local Kubernetes experience on Windows (Hyper-V/WSL2) for reliable desktop tooling connectivity.

• Removed the need for manual Windows firewall rule changes by improving reachability, networking defaults, and out-of-box cluster access.
• Added IPv6 support in Minikube, and upstreamed PR.

DALEC

Project: Build/packaging tooling for reproducible outputs across Linux distros.

• Driving cross-compilation and multi-arch (ARM64↔AMD64) support to improve portability across heterogeneous CI environments.
• Contributing to distro-targeting patterns to keep outputs reproducible across Debian, RPM families, while maintaining clean build ergonomics.

Tech Stack: Go, Kubernetes/AKS, Confidential Containers (CoCo/CAA) & KBS/Trustee, Konnectivity, Docker/BuildKit/Buildx, containerd, Linux (WSL2/Hyper-V), networking/observability (metrics, alerts), GitHub Actions, Azure DevOps/OneBranch, Trivy, Azure Data Explorer (Kusto).

Company: US-based wireless broadband startup delivering gigabit wireless connectivity in non-line-of-sight environments.

Switch Manager (Switch Control Plane & Operations)

Project: Central module responsible for orchestrating low-level/high-level operations and routing requests across multiple switches.

• Implemented the Switch Manager core to manage switch operations end-to-end.
• Built key services: link diagnostics, statistics/telemetry collection, and gNMI-based management for remote observability and control.

Comcores Switch SDK (Switch Abstraction Layer)

Project: SDK layer to standardize and simplify switch operations within the Comcores switch stack.

• Developed the Comcores Switch SDK to handle switch-related operations via a clean, reusable API surface.
• Improved integration consistency by encapsulating switch features behind a single interface used across components.

eBPF Enablement (Packet Processing & Networking Features)

Project: Extending Linux networking capabilities using modern in-kernel programmability.

• Ported functionality to eBPF and implemented both user-space loaders/controllers and in-kernel eBPF programs for networking-related features.

Tech stack: C/C++, Linux, gNMI/gRPC, eBPF, networking/telemetry, GoogleTest/GoogleMock, switch SDKs/driver-facing APIs.

Worked as software engineering intern in System Software Engineering team in Tarana wireless Inc, Pune

● Worked with system software and network software team to implement various APIs and adding automated test using gtest and ntf framework.