Senior Infrastructure Engineer - #2195494

The ideal candidate should have hands-on experience operating reverse proxies in production environments using technologies such as NGINX, HAProxy, F5, Traefik, or Envoy.

Candidates should also possess strong Go (Golang) development experience and a solid understanding of TLS/mTLS, networking, and security protocols.

Required Skills

• Hands-on experience with L4/L7 reverse proxy technologies in production environments, including any of the following:
• NGINX
• HAProxy
• F5
• Traefik
• Envoy
• Strong production experience with Go (Golang).
• Good understanding of TLS/mTLS, including:
• SNI and ALPN
• Client certificate validation
• Certificate lifecycle management.

Preferred Skills

• JWT, OAuth2, and OIDC, with hands-on experience implementing or debugging token validation.
• Protobuf and gRPC, including schema development and debugging gRPC transport issues.

Other Relevant Skills

• Policy Management: OPA/Rego policy implementation, including Kubernetes admission control.
• Distributed Storage: Redis, DynamoDB, TTL, replication, and failover consistency.
• Identity Platforms: ForgeRock, Okta, Ping Identity, or Auth0.
• Kafka / Event Streaming: Producing and consuming events, configuring topics and consumers, and implementing event-driven services.
• Observability: Prometheus, Grafana, and OpenTelemetry (OTel).