Nicolas Baud
Author & Lead Architect of Aegis
Auteur et architecte principal d'Aegis
Actions
Nicolas Baud is a CTO, Solution Architect, and Founding Lead Engineer with over 15 years of experience designing critical software architectures, zero-trust cloud infrastructure, and IAM systems for healthcare, public institutions, and enterprise SaaS platforms. He is the author and lead architect of Aegis, an open-source zero-trust and energy telemetry framework. Based in France, he specializes in Air-Gapped Kubernetes deployments, Keycloak GitOps, and sustainable cloud-native engineering.
Nicolas Baud est CTO, architecte de solutions et ingénieur principal fondateur. il possède plus de 15 ans d'expérience dans la conception d'architectures logicielles critiques, d'infrastructures cloud « Zero Trust » et de systèmes IAM pour le secteur de la santé, les institutions publiques et les plateformes SaaS d'entreprise. Il est l'auteur et l'architecte principal d'Aegis, un framework open source dédié au « Zero Trust » et à la télémétrie énergétique. Basé en France, il se spécialise dans les déploiements Kubernetes en environnement isolé (air-gapped), le GitOps avec Keycloak et l'ingénierie cloud-native durable.
Hardening Agentic AI at the Edge: Zero-Trust Gateways and Air-Gapped Decision SLMs
Deploying autonomous AI agents in cloud-native environments introduces key security risks, including excessive API privileges, prompt injections, and unmonitored C2 callbacks, which traditional perimeter defenses cannot handle.
This session presents an open-source architecture for edge-level agent governance. We cover decoupling authentication and authorization via Envoy Proxy, Authorino (PEP), and Keycloak SSO. At the network boundary, combining eBPF kernel probes with local, air-gapped SLMs (such as Nimble 9B via Ollama) provides deterministic risk evaluation in under 50 ms per request, preventing data leaks to external APIs and avoiding token costs.
Attendees will receive actionable blueprints for zero-trust agent governance, eBPF network filtering, and air-gapped SLM routing.
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top