Cloud Infrastructure Engineer - Glasgow - 5 days on site

Location: Glasgow - 5 days onsite

Rate: £460 per day - Inside IR35

Contract: 6 months, likely to extend

Client: Leading Banking Client

Role Overview

We are seeking an experienced Cloud Infrastructure Engineer with strong production infrastructure and cloud SRE experience to support a leading banking client.

The successful candidate must have demonstrable hands-on experience operating and troubleshooting production reverse Proxy infrastructure and secure TLS/mTLS communication.

This is a technically demanding role requiring someone who can investigate complex production issues, understand underlying configurations and protocols, and implement effective solutions.

Essential Requirements - Must Have

1. 8+ Years' Experience

• Minimum 8 years' professional experience in Cloud Infrastructure, SRE, Platform Engineering or related roles.
• Strong experience supporting production-grade, high-availability environments.

2. L4/L7 Reverse Proxy - Production Experience

• Hands-on production experience with at least one of:
• NGINX
• HAProxy
• F5
• Traefik
• Envoy
• Strong understanding of L4/L7 traffic management, routing, load balancing and Proxy configurations.
• Must be able to demonstrate structured troubleshooting of production performance, availability and regional routing issues.
• Experience investigating Proxy logs, configuration, health checks, connection handling and upstream behaviour.
• Ability to identify and resolve complex production issues rather than simply having exposure to the technology.

3. TLS/mTLS - Strong Practical Knowledge

• Strong understanding of TLS and mutual TLS.
• Knowledge of SNI, ALPN and client certificate validation.
• Experience managing certificate life cycle, renewals and trust chains.
• Ability to troubleshoot TLS handshake failures in production.
• Understanding of secure protocol and cipher-suite negotiation.
• Knowledge of downgrade-attack prevention and secure communication across multi-tenant environments.

Desirable Technical Experience

Go/Golang

• Production experience developing, operating and troubleshooting Go services.

Authentication and Identity

• JWT, OAuth2 and OIDC.
• Token validation, revocation and post-logout access troubleshooting.
• ForgeRock, Okta, Ping or Auth0.

gRPC/Protobuf

• Protobuf schema design.
• Cross-language serialization and compatibility.
• gRPC transport troubleshooting.

Distributed Storage

• Redis and DynamoDB.
• TTL, replication, failover and consistency.
• Memory usage and performance troubleshooting.

Policy Management

• OPA/Rego policy implementation.
• Kubernetes admission control.
• Policy debugging, impact assessment and validation.

Event Streaming

• Kafka producers and consumers.
• Topic configuration and event-driven services.

Observability

• Prometheus.
• Grafana.
• OpenTelemetry (OTel).

What We Are Looking For

The successful candidate must be able to demonstrate:

• Genuine hands-on production experience, not just theoretical knowledge.
• A structured approach to investigating and resolving complex technical problems.
• Ability to explain configurations, logs, tools and troubleshooting processes.
• Experience operating high-availability infrastructure within demanding environments.
• Confidence discussing technical decisions and explaining how they resolved real production incidents.

What candidates must demonstrate

Reverse Proxy

Diagnose a real production performance or regional routing issue using Proxy configurations, logs and operational tools.

TLS/mTLS

Explain and troubleshoot handshake failures, SNI, ALPN, certificates and cipher negotiation.

Go

Explain production Go development and service troubleshooting.

JWT/OAuth

Explain token validation, revocation and access issues.

gRPC

Diagnose schema, serialization and transport compatibility issues.

Redis/DynamoDB

Investigate memory spikes, replication and performance problems.