Platform Engineer - #2086322

Hiring: Platform Engineer

Location: [Specify Location]

Employment Type: [Permanent / Contract]

Experience: 8+ Years

We are seeking an experienced Platform Engineer to join a high-performing engineering team responsible for building and operating scalable, secure, and resilient platform infrastructure. The ideal candidate will have deep expertise in Kubernetes, API gateways, cloud-native technologies, observability, and distributed systems.

Key Responsibilities

• Design, build, and operate Envoy and Kong gateway infrastructure serving production traffic across multiple business domains.

• Develop Go-based control-plane services, including Ingress Registry, xDS controllers, Session Manager, and Context Propagator.

• Implement and maintain OPA policy bundles for authorization and policy enforcement at the gateway layer.

• Build and enhance OpenTelemetry instrumentation pipelines, integrating with Dynatrace and Splunk SIEM.

• Manage GitOps-driven deployments using ArgoCD and Helm across multi-cluster Kubernetes environments.

• Automate WAF rule management across Akamai and Cloudflare using WAF-as-Code practices.

• Contribute to platform operator consoles and dashboards for route management, drift detection, and operational visibility.

• Collaborate with business and engineering teams to onboard applications and migrate traffic from legacy platforms.

• Participate in incident response, production readiness reviews, and operational excellence initiatives.

• Champion engineering best practices including code reviews, automated testing, documentation, and observability-first design.

Required Skills & Experience

• Bachelor's or Master's degree in Computer Science, Engineering, or a related technical field.

• Srong Industry experience in platform engineering, cloud infrastructure, or software engineering.

• 5+ years of hands-on experience with:

• Envoy Proxy (xDS/ADS, ext_authz, HTTP/2, gRPC, WebSocket)
• Kong API Gateway (plugin development, DB-less mode, Admin API)
• • Strong Go programming expertise with experience building:
• Control-plane services
• gRPC APIs
• Kubernetes controllers using client-go
• Concurrent and distributed systems

Kubernetes & Cloud Native

• Production experience with Kubernetes (EKS and/or on-premises clusters)

• Helm Charts

• Horizontal Pod Autoscaling (HPA)

• PodDisruptionBudgets

• Network Policies

• Namespace Isolation

• ArgoCD GitOps

Security & Identity

• OAuth 2.0, OIDC, PKCE

• DPoP sender-constrained tokens

• Mutual TLS (mTLS)

• Session management architectures

• Open Policy Agent (OPA) and Rego policy development

Observability & Monitoring

• OpenTelemetry (traces, metrics, logs)

• Dynatrace

• Splunk SIEM

• Observability-first platform design

Networking & Infrastructure

• Deep understanding of networking concepts (Layer 3–7)

• Distributed systems architecture

• DNS steering (GeoDNS, Akamai GTM, health-check routing)

• TLS certificate lifecycle management

• cert-manager, HSM, and KMS

Data Platforms

• PostgreSQL (HA, connection pooling, PITR)

• Kafka (MSK, Schema Registry, DLQ patterns)

Additional Technologies

• Akamai Ion & Kona

• Cloudflare

• WAF-as-Code automation

• GitOps delivery pipelines

Nice to Have

• TypeScript and React development experience

• AWS services including EKS, MSK, Lambda, Direct Connect, and Network Firewall

• Bitbucket Pipelines CI/CD

• Experience with CAEP (Continuous Access Evaluation Protocol)

• Identity platforms such as ForgeRock

• SAML federation and token exchange patterns

What We're Looking For

• Strong problem-solving and analytical skills.

• Passion for building highly available, low-latency, resilient platforms.

• Experience working in large-scale production environments.

• Excellent communication and collaboration skills.

• Commitment to engineering excellence and continuous improvement.

Interested candidates can apply through the Easy Apply button or send their CVs to [email protected].