Cloud Infrastructure Engineer - Glasgow - 5 days on site

Location: Glasgow - 5 days onsite
Rate: £460 per day - Inside IR35
Contract: 6 months, likely to extend
Client: Leading Banking Client

Role Overview

We are seeking an experienced Cloud Infrastructure Engineer with strong production infrastructure and cloud SRE experience to support a leading banking client.

The successful candidate must have demonstrable hands-on experience operating and troubleshooting production reverse Proxy infrastructure and secure TLS/mTLS communication.

This is a technically demanding role requiring someone who can investigate complex production issues, understand underlying configurations and protocols, and implement effective solutions.

Essential Requirements - Must Have

1. 8+ Years' Experience

• Minimum 8 years' professional experience in Cloud Infrastructure, SRE, Platform Engineering or related roles.

• Strong experience supporting production-grade, high-availability environments.

2. L4/L7 Reverse Proxy - Production Experience

• Hands-on production experience with at least one of:

  • NGINX

  • HAProxy

  • F5

  • Traefik

  • Envoy

• Strong understanding of L4/L7 traffic management, routing, load balancing and Proxy configurations.

• Must be able to demonstrate structured troubleshooting of production performance, availability and regional routing issues.

• Experience investigating Proxy logs, configuration, health checks, connection handling and upstream behaviour.

• Ability to identify and resolve complex production issues rather than simply having exposure to the technology.

3. TLS/mTLS - Strong Practical Knowledge

• Strong understanding of TLS and mutual TLS.

• Knowledge of SNI, ALPN and client certificate validation.

• Experience managing certificate lifecycle, renewals and trust chains.

• Ability to troubleshoot TLS handshake failures in production.

• Understanding of secure protocol and cipher-suite negotiation.

• Knowledge of downgrade-attack prevention and secure communication across multi-tenant environments.

Desirable Technical Experience

Go/Golang

- Production experience developing, operating and troubleshooting Go services.

Authentication and Identity

• JWT, OAuth2 and OIDC.

• Token validation, revocation and post-logout access troubleshooting.

• ForgeRock, Okta, Ping or Auth0.

gRPC/Protobuf

• Protobuf schema design.

• Cross-language serialization and compatibility.

• gRPC transport troubleshooting.

Distributed Storage

• Redis and DynamoDB.

• TTL, replication, failover and consistency.

• Memory usage and performance troubleshooting.

Policy Management

• OPA/Rego policy implementation.

• Kubernetes admission control.

• Policy debugging, impact assessment and validation.

Event Streaming

• Kafka producers and consumers.

• Topic configuration and event-driven services.

Observability

• Prometheus.

• Grafana.

• OpenTelemetry (OTel).

What We Are Looking For

The successful candidate must be able to demonstrate:

• Genuine hands-on production experience, not just theoretical knowledge.

• A structured approach to investigating and resolving complex technical problems.

• Ability to explain configurations, logs, tools and troubleshooting processes.

• Experience operating high-availability infrastructure within demanding environments.

• Confidence discussing technical decisions and explaining how they resolved real production incidents.

What candidates must demonstrate

Reverse proxy

Diagnose a real production performance or regional routing issue using Proxy configurations, logs and operational tools.

TLS/mTLS

Explain and troubleshoot handshake failures, SNI, ALPN, certificates and cipher negotiation.

Go

Explain production Go development and service troubleshooting.

JWT/OAuth

Explain token validation, revocation and access issues.

gRPC

Diagnose schema, serialization and transport compatibility issues.

Redis/DynamoDB

Investigate memory spikes, replication and performance problems.