Platform Engineer - #2085954

Role Title : Platform Engineer

Location : Glasgow, UK

Employment Type : Permanent

Required Skill

• sBS/MS degree in Computer Science, related technical field, or equivalent with 8+ years of industry experienc
• e5+ years hands-on experience with Envoy Proxy (xDS/ADS, ext_authz, HTTP/2, gRPC, WebSocket) and/or Kong API Gateway (plugin development, DB-less mode, Admin API
• )Strong Go development skills - control-plane services, gRPC APIs, Kubernetes controllers (client-go), concurrency pattern
• sProduction Kubernetes experience (EKS and/or on-prem clusters) - Helm charts, HPA, PodDisruptionBudgets, NetworkPolicy, namespace isolation, ArgoCD GitOp
• sDeep understanding of OAuth 2.0 / OIDC / PKCE flows, DPoP sender-constrained tokens, mTLS, and session management pattern
• sExperience with OPA (Open Policy Agent) policy authoring in Rego and sidecar deployment pattern
• sHands-on with OpenTelemetry (traces, metrics, logs), Dynatrace, and Splunk SIEM integratio
• nWorking knowledge of CDN/WAF platforms (Akamai Ion, Kona, Cloudflare) and WAF-as-code automatio
• nExperience with PostgreSQL (HA, connection pooling, PITR) and Kafka (MSK, Schema Registry, DLQ patterns
• )Familiarity with DNS steering (GeoDNS, Akamai GTM, health-check routing) and TLS certificate lifecycle (cert-manager, HSM/KMS
• )Strong CS fundamentals - networking (L3-L7), distributed systems, data structures & algorithm
• sExperience building high-volume, low-latency, resilient infrastructure service

s
Nice to hav

• e:TypeScript/React experience for operator dashboard developme
• ntAWS infrastructure experience (EKS, MSK, Lambda, Direct Connect, Network Firewal
• l)Bitbucket Pipelines CI/CD and GitOps delivery workflo
• wsExperience with CAEP (Continuous Access Evaluation Protocol) or similar session revocation mechanis
• msBackground in identity platforms (ForgeRock, SAML federation, token exchange pattern