> Markdown version of [/jobs/ext/2897336-platform-engineer-kms-go-kubernetes-operators](https://www.wearedevelopers.com/jobs/ext/2897336-platform-engineer-kms-go-kubernetes-operators). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Platform Engineer - Kms (Go / Kubernetes / Operators)

- **Company:** Q Tech
- **Location:** Sant Joan, Spain
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Digital Signature, Key Management, RSA (Cryptosystem), Software Construction, Kubernetes
- **Published:** September 14, 2026
- **Apply:** https://www.buscojobs.com.es/platform-engineer-kms-go-kubernetes-operators-en-san-juan-ID-371789585

## About the Role

Real experience building software in Go , with Kubernetes as a core part of your day-to-day - not just deploying on it, but building Operators .
Solid knowledge of applied cryptography : symmetric and asymmetric encryption, key management, digital signatures.
Ideally, you come from a cybersecurity company, a cloud provider, or a platform/infrastructure team that already works with these concepts daily.
You care about security not as a checkbox, but as the core of what you build.
High level of English - the team works with international counterparts.
Why this project
You'll build critical infrastructure with a high degree of technical autonomy: the team operates independently in order to sign off on security for the rest of the platform.

## Description

One of the largest retail companies in Europe is building its own sovereign cloud from the ground up - infrastructure designed so that the business's critical data and services live within the European Union, fully independent of the major US or Asian providers.Within that platform there's a team that doesn't build customer-facing features, but something far more fundamental: the system that protects, encrypts, and manages every key and secret the rest of the platform depends on. Without this team, nothing else can be considered secure.We're looking for the person who will join that team as a Platform Engineer.What you'll build:The Key Management Service (KMS) : the central system that generates, rotates, and protects encryption keys across the entire platform.Envelope Encryption flows (multi-layer encryption), managing the relationship between data keys and master keys.Kubernetes Operators that fully automate this system's lifecycle - with no manual intervention.APIs that other teams across the company will use to request keys, sign documents, or verify signatures, without needing to understand cryptography themselves.A product that must meet the industry's toughest security standards (AES, RSA, ECDSA, HMAC) and the audit requirements of a high-risk cloud environment.You'll work under a \ "you build it, you run it\" model: what you design, you operate. No launching it and walking away.What we're looking forReal experience building software in Go , with Kubernetes as a core part of your day-to-day - not just deploying on it, but building Operators .Solid knowledge of applied cryptography : symmetric and asymmetric encryption, key management, digital signatures.Ideally, you come from a cybersecurity company, a cloud provider, or a platform/infrastructure team that already works with these concepts daily.You care about security not as a checkbox, but as the core of what you build.High level of English - the team works with international counterparts.Why this projectYou'll build critical infrastructure with a high degree of technical autonomy: the team operates independently in order to sign off on security for the rest of the platform.You'll be part of one of the largest infrastructure projects currently being built in Europe, with strong team growth plans over the coming months.You'll work on real engineering problems, not business features - the kind of work few retail companies offer in-house.


## Related Videos

- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [One Platform Could Not Fit Them All](https://www.wearedevelopers.com/videos/1919-one-platform-could-not-fit-them-all)
- [Startup Presentation: IgniSign - Sign for Real](https://www.wearedevelopers.com/videos/1168-startup-presentation-ignisign-sign-for-real)
- [This Machine Ends Data Breaches](https://www.wearedevelopers.com/videos/574-this-machine-ends-data-breaches)
- [Building a Cloud Platform Where Everything is Just Another Kubernetes Resource](https://www.wearedevelopers.com/videos/100137-building-a-cloud-platform-where-everything-is-just-another-kubernetes-resource)
- [Securing Secrets in the GitOps era](https://www.wearedevelopers.com/videos/546-securing-secrets-in-the-gitops-era)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Biggest German Tech Companies](https://www.wearedevelopers.com/magazine/424-the-biggest-german-tech-companies)