Cloud Infra Engineer

Would have L4/L7 experience running a reverse proxy in production (any vendor: NGINX, HAProxy, F5, Traefik, Envoy). If that is not possible, here are some other requirements.

Required

• Go production experience

• TLS/mTLS knowledge: SNI, ALPN, client cert validation, cert lifecycle

Preferably

• JWT/OAuth2/OIDC: hands-on implementing or debugging token validation would be best, but general knowledge is ok too

• Protobuf / gRPC schema and debugging gRPC transport

Other relevant skills

• OPA/Rego policy implementation, even from K8s admission control

• Distributed storage: Redis, DynamoDB (TTL, replication, failover consistency)

• Identity platform experience: ForgeRock, Okta, Ping, Auth0

• Kafka/event-streaming: producing/consuming events, setting up topics/consumers, reacting to events in a service