Karl Ots
Head of Cloud Security at EPAM | Author and Inventor
New York City, New York, United States
Actions
Karl Ots is a cloud security leader, author, and educator with over 15 years of experience in the technology industry. He serves as the Head of Cloud Security at EPAM Systems, where he leads global teams in delivering secure, scalable, and compliant cloud solutions for Fortune 500 clients across diverse industries.
Karl is the author of the book Securing Microsoft Azure OpenAI (Wiley) and a LinkedIn Learning instructor, where he teaches advanced topics in cloud security architecture. He is a recognized Microsoft Regional Director and Security MVP, and holds certifications including CISSP, CCSP, and SABSA SCF.
A frequent speaker at global conferences, Karl is passionate about helping organizations build secure cloud-native systems and communicate complex security designs effectively across technical and executive audiences.
Badges
Area of Expertise
Topics
Cloud’s Dirty Little Secret: It Was Misconfigs All Along
Everyone loves to chase the next big exploit, but here’s the truth: most cloud breaches don’t start with some elite APT magic — they start with someone leaving the front door wide open. Misconfigurations are the silent killer of cloud security, and they’re everywhere.
After tearing down hundreds of Azure deployments across industries, I’ve seen the same screw-ups again and again — from Fortune 500s to scrappy startups. In this talk, I’ll walk through the most common cloud security faceplants, why they’re so easy to make (and miss), and how to actually fix them before someone else finds them first.
If you’ve ever wondered what cloud security looks like when it fails quietly, this is your wake-up call.
Securing Azure Open AI apps in the Enterprise
With the last year bringing us real hands-on experience with Azure OpenAI, and the announcement of OpenAI’s ChatGPT Enterprise. it's time to look at how to properly secure Open AI services in Azure.
In this session, we explore the core security controls for securing usage of OpenAI’s services in an enterprise environment. We cover what controls are available, which are missing, what is their effective coverage, and how to implement them.
Walking out of the session, you will be able to identify and implement security controls that make sense for your organization. You will also be able to identify what is missing and how to mitigate those gaps.
BSides Seattle 2026 Sessionize Event Upcoming
NDC Manchester 2025 - AI & Security Sessionize Event
BSidesNYC 0x05 Sessionize Event
CNCF-hosted Co-located Events Europe 2025 Sessionize Event
DevSum 2024 Sessionize Event
CloudBrew 2023 - A two-day Microsoft Azure event Sessionize Event
ESPC23 - European SharePoint, Office 365 & Azure Conference Sessionize Event
DDD North 2022 Sessionize Event
KCDC 2022 Sessionize Event
IglooConf 2022: Midsummer Sessionize Event
DevSum 2022 Sessionize Event
Global Azure 2022 Sessionize Event
Microsoft Azure + AI Conference Spring 2022 Sessionize Event
Security BSides Dublin 2022 Sessionize Event
DDD 2021 Sessionize Event
Automation + DevOps Summit Sessionize Event
KCDC 2021 Sessionize Event
India Cloud Security Summit , 2021 Sessionize Event
Azure Lowlands Sessionize Event
DDD 2020 Sessionize Event
Experts Live Switzerland 2020 Sessionize Event
Microsoft Techdays 2020 Sessionize Event
IglooConf 2020 Sessionize Event
CloudBrew 2019 - A two-day Microsoft Azure event Sessionize Event
ITCamp 2019 Sessionize Event
Techorama Belgium 2019 Sessionize Event
IglooConf 2019 Sessionize Event
Update Conference Prague 2018 Sessionize Event
CloudBrew 2018 - A two-day Microsoft Azure event Sessionize Event
Intelligent Cloud Conference 2018 Sessionize Event
Azure Saturday 2018 Sessionize Event
TechDays Finland 2018
Navigating in the sea of containers in Azure: when to choose which service and why?
CloudBrew 2017 - A full-day Microsoft Azure event Sessionize Event
TechDays Sweden 2017
Monitoring advanced Azure PaaS workloads in the enterprise - Level: 200
TechDays Netherlands 2017
Building globally scalable media solutions with Azure Media Services
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top