Cloud Infrastructure Engineer - Glasgow - 5 days on site

gRPC/Protobuf

• Protobuf schema design.
• Cross-language serialization and compatibility.
• gRPC transport troubleshooting.

Distributed Storage

• Redis and DynamoDB.
• TTL, replication, failover and consistency.
• Memory usage and performance troubleshooting.

Policy Management

• OPA/Rego policy implementation.
• Kubernetes admission control.
• Policy debugging, impact assessment and validation.

Event Streaming

• Kafka producers and consumers.
• Topic configuration and event-driven services.

Observability

• Prometheus.
• Grafana.
• OpenTelemetry (OTel).

We are seeking an experienced Cloud Infrastructure Engineer with strong production infrastructure and cloud SRE experience to support a leading banking client.

The successful candidate must have demonstrable hands-on experience operating and troubleshooting production reverse Proxy infrastructure and secure TLS/mTLS communication.

This is a technically demanding role requiring someone who can investigate complex production issues, understand underlying configurations and protocols, and implement effective solutions.

Essential Requirements - Must Have

1. 8+ Years’ Experience * Minimum 8 years’ professional experience in Cloud Infrastructure, SRE, Platform Engineering or related roles. * Strong experience supporting production-grade, high-availability environments.

2. L4/L7 Reverse Proxy - Production Experience * Hands-on production experience with at least one of: + NGINX + HAProxy + F5 + Traefik + Envoy * Strong understanding of L4/L7 traffic management, routing, load balancing and Proxy configurations. * Must be able to demonstrate structured troubleshooting of production performance, availability and regional routing issues. * Experience investigating Proxy logs, configuration, health checks, connection handling and upstream behaviour. * Ability to identify and resolve complex production issues rather than simply having exposure to the technology.

3. TLS/mTLS - Strong Practical Knowledge * Strong understanding of TLS and mutual TLS. * Knowledge of SNI, ALPN and client certificate validation. * Experience managing certificate life cycle, renewals and trust chains. * Ability to troubleshoot TLS handshake failures in production. * Understanding of secure protocol and cipher-suite negotiation. * Knowledge of downgrade-attack prevention and secure communication across multi-tenant environments.

Desirable Technical Experience

Go/Golang

• Production experience developing, operating and troubleshooting Go services.

Authentication and Identity

• JWT, OAuth2 and OIDC.
• Token validation, revocation and post-logout access troubleshooting.
• ForgeRock, Okta, Ping or Auth0., * Genuine hands-on production experience, not just theoretical knowledge.
• A structured approach to investigating and resolving complex technical problems.
• Ability to explain configurations, logs, tools and troubleshooting processes.
• Experience operating high-availability infrastructure within demanding environments.
• Confidence discussing technical decisions and explaining how they resolved real production incidents.

What candidates must demonstrate

Reverse Proxy

Diagnose a real production performance or regional routing issue using Proxy configurations, logs and operational tools.

TLS/mTLS

Explain and troubleshoot handshake failures, SNI, ALPN, certificates and cipher negotiation.