Platform Engineer — Kms (Go / Kubernetes / Operators)

Q-Tech; Jaén; Presencial; EUR 60.000 - 90.000; Jornada completa

Descripción de la vacante

Q-Tech busca un Platform Engineer para construir y mantener sistemas de gestión de claves (KMS) y flujos de envelope encryption sobre Kubernetes. Trabajarás con Go para desarrollar Kubernetes Operators, APIs seguras y servicios criptográficos en un entorno de nube europeo.

Se requiere experiencia en criptografía aplicada, enfoque en seguridad y capacidad de colaborar con equipos internacionales. Modelo de trabajo responsable y regulado, con alto énfasis en autonomía técnica.

Formación

• Experiencia real en desarrollo de software con Go y Kubernetes, construyendo Operators.
• Conocimientos sólidos de criptografía aplicada: cifrado simétrico/asimétrico, gestión de claves, firmas digitales.
• Procedes de una empresa de ciberseguridad, proveedor de nube o equipo de plataforma que ya trabaja con estos conceptos.
• La seguridad es el núcleo de lo que construyes y no un simple checkbox.
• Nivel alto de inglés; el equipo colabora con contrapartes internacionales.

Responsabilidades

• Desarrollar software en Go y crear Operators de Kubernetes para automatizar el ciclo de vida.
• Diseñar y mantener el KMS y flujos de envelope encryption across the platform.
• Proveer APIs para que otros equipos soliciten claves, firmen documentos o verifiquen firmas sin entender criptografía.
• Trabajar bajo el modelo "you build it, you run it": lo que diseñas, lo operas.

Conocimientos

Go

Kubernetes

Cryptography

Security practices

Herramientas

Kubernetes Operators

Descripción del empleo

Descripción del trabajo

One of the largest retail companies in Europe is building its own sovereign cloud from the ground up — infrastructure designed so that the businesss critical data and services live within the European Union, fully independent of the major US or Asian providers.

Within that platform theres a team that doesnt build customer-facing features, but something far more fundamental: the system that protects, encrypts, and manages every key and secret the rest of the platform depends on. Without this team, nothing else can be considered secure.

Were looking for the person who will join that team as a Platform Engineer.

What youll build:

• The Key Management Service (KMS): the central system that generates, rotates, and protects encryption keys across the entire platform.
• Envelope Encryption flows (multi-layer encryption), managing the relationship between data keys and master keys.
• Kubernetes Operators that fully automate this systems lifecycle — with no manual intervention.
• APIs that other teams across the company will use to request keys, sign documents, or verify signatures, without needing to understand cryptography themselves.
• A product that must meet the industrys toughest security standards (AES, RSA, ECDSA, HMAC) and the audit requirements of a high-risk cloud environment.

Youll work under a \"you build it, you run it\" model: what you design, you operate. No launching it and walking away.

What were looking for

• Real experience building software in Go, with Kubernetes as a core part of your day-to-day — not just deploying on it, but building Operators.
• Solid knowledge of applied cryptography: symmetric and asymmetric encryption, key management, digital signatures.
• Ideally, you come from a cybersecurity company, a cloud provider, or a platform/infrastructure team that already works with these concepts daily.
• You care about security not as a checkbox, but as the core of what you build.
• High level of English — the team works with international counterparts.

Why this project

• Youll build critical infrastructure with a high degree of technical autonomy: the team operates independently in order to sign off on security for the rest of the platform.
• Youll be part of one of the largest infrastructure projects currently being built in Europe, with strong team growth plans over the coming months.
• Youll work on real engineering problems, not business features — the kind of work few retail companies offer in-house.