Platform Engineer

DNS INFO LTD; Glasgow; On-site; GBP 90,000 - 130,000; Full time

Job summary

DNS INFO LTD in the United Kingdom is seeking an experienced engineer to design, build and operate Envoy and Kong gateway infrastructure, under production load across multiple lines of business. You will develop Go‑based control‑plane services such as Ingress Registry and xDS controllers.

The role requires strong Kubernetes expertise, deep knowledge of OAuth2/OIDC/PKCE, Open Policy Agent and observability with OpenTelemetry, Dynatrace and Splunk, plus hands‑on experience with ArgoCD and GitOps

Qualifications

• BS/MS degree in Computer Science, related technical field, or equivalent with 8+ years of industry experience.
• 5+ years hands‑on experience with Envoy Proxy and/or Kong API Gateway.
• Strong Go development skills – control‑plane services, gRPC APIs, Kubernetes controllers.
• Production Kubernetes experience (EKS and/or on‑prem clusters).
• Deep understanding of OAuth 2.0 / OIDC / PKCE flows, mTLS and session management patterns.
• Experience with OPA (Open Policy Agent) policy authoring in Rego.
• Hands‑on with OpenTelemetry, Dynatrace, Splunk SIEM integration.
• Working knowledge of CDN/WAF platforms (Akamai, Cloudflare) and WAF‑as‑code.
• Experience with PostgreSQL and Kafka (MSK, Schema Registry).
• Familiarity with DNS steering and TLS certificate lifecycle management.
• Strong CS fundamentals – networking, distributed systems, data structures & algorithms.

Responsibilities

• Design, build and operate Envoy and Kong gateway infrastructure serving production traffic.
• Develop Go‑based control‑plane services – Ingress Registry, xDS controllers, Session Manager.
• Implement and maintain OPA policy bundles for gateway authorization.
• Build and extend OpenTelemetry instrumentation pipelines and SIEM forwarding.
• Manage GitOps deployments via ArgoCD and Helm across multi‑cluster Kubernetes environments.
• Automate WAF rule management across Akamai and Cloudflare using WAF‑as‑code patterns.
• Contribute to the platform operator console for route management and session visibility.
• Collaborate with LOB teams to onboard routes and migrate traffic from legacy ingress.
• Participate in incident response, runbook development and production readiness reviews.
• Champion software engineering best practices – code review, testing, documentation and observability.

Education

BS/MS degree in Computer Science or related field

Tools

Envoy Proxy

Kong API Gateway

Kubernetes controllers

ArgoCD

OpenTelemetry

Dynatrace

Splunk SIEM

CDN/WAF (Akamai/Cloudflare)

PostgreSQL

Kafka/MSK

Job description

5 Days Onsite.

Required Skills

• BS/MS degree in Computer Science, related technical field, or equivalent with 8+ years of industry experience
• 5+ years hands‑on experience with Envoy Proxy (xDS/ADS, ext_authz, HTTP/2, gRPC, WebSocket) and/or Kong API Gateway (plugin development, DB‑less mode, Admin API)
• Strong Go development skills – control‑plane services, gRPC APIs, Kubernetes controllers (client-go), concurrency patterns
• Production Kubernetes experience (EKS and/or on‑prem clusters) – Helm charts, HPA, PodDisruptionBudgets, NetworkPolicy, namespace isolation, ArgoCD GitOps
• Deep understanding of OAuth 2.0 / OIDC / PKCE flows, DPoP sender‑constrained tokens, mTLS, and session management patterns
• Experience with OPA (Open Policy Agent) policy authoring in Rego and sidecar deployment patterns
• Hands‑on with OpenTelemetry (traces, metrics, logs), Dynatrace, and Splunk SIEM integration
• Working knowledge of CDN/WAF platforms (Akamai Ion, Kona, Cloudflare) and WAF‑as‑code automation
• Experience with PostgreSQL (HA, connection pooling, PITR) and Kafka (MSK, Schema Registry, DLQ patterns)
• Familiarity with DNS steering (GeoDNS, Akamai GTM, health‑check routing) and TLS certificate lifecycle (cert‑manager, HSM/KMS)
• Strong CS fundamentals – networking (L3‑L7), distributed systems, data structures & algorithms
• Experience building high‑volume, low‑latency, resilient infrastructure services

Nice to have

• TypeScript/React experience for operator dashboard development
• AWS infrastructure experience (EKS, MSK, Lambda, Direct Connect, Network Firewall)
• Bitbucket Pipelines CI/CD and GitOps delivery workflows
• Experience with CAEP (Continuous Access Evaluation Protocol) or similar session revocation mechanisms
• Background in identity platforms (ForgeRock, SAML federation, token exchange patterns)

Day‑to‑Day Responsibilities

• Design, build and operate Envoy and Kong gateway infrastructure serving production traffic across multiple lines of business
• Develop Go‑based control‑plane services – Ingress Registry, xDS controllers, Session Manager, Context Propagator
• Implement and maintain OPA policy bundles for coarse‑grained authorization at the gateway layer
• Build and extend OpenTelemetry instrumentation pipelines (OTel Collector, Dynatrace OTLP ingest, Splunk SIEM forwarding)
• Manage GitOps‑driven deployments via ArgoCD and Helm across multi‑cluster Kubernetes environments
• Automate WAF rule management across Akamai and Cloudflare using WAF‑as‑code patterns
• Contribute to the platform operator console (TypeScript/React) for route management, drift detection, and session visibility
• Collaborate with LOB teams to onboard routes and migrate traffic from legacy ingress infrastructure
• Participate in incident response, runbook development, and production readiness reviews
• Champion software engineering best practices – code review, testing, documentation, and observability‑first design