Senior Golang Engineer – Kubernetes Controllers & Secrets Management
About the Role
We are looking for a Senior Golang Engineer to join a cloud platform engineering team building highly automated, secure and scalable cloud-native infrastructure.
This role sits at the intersection of Kubernetes engineering, platform automation and cloud security .
You will work hands-on developing Kubernetes Controllers and Operators in Go , automating the lifecycle of platform services and cloud resources, while contributing to secure Secrets Management and Key Management (KMS) capabilities used across the platform.
This is not simply a role operating Kubernetes. We are looking for engineers interested in building and extending Kubernetes itself through APIs, Controllers, Operators and automation .
What You'll Be Doing
Kubernetes Controllers & Platform Engineering
Design, develop and maintain Kubernetes Controllers and Operators using Go/Golang .
Build automation around Kubernetes resources using CRDs and Kubernetes APIs .
Automate the provisioning, configuration and lifecycle management of cloud and platform resources.
Build reliable reconciliation and control-loop logic for distributed systems.
Contribute to multi-cluster Kubernetes environments and platform orchestration.
Develop internal platform capabilities that enable engineering teams to consume infrastructure and services through automated, self-service workflows.
Improve CI/CD, GitOps and Infrastructure-as-Code processes.
Troubleshoot complex Kubernetes and distributed-system issues in production environments.
Help ensure the reliability, scalability and observability of platform services.
Secrets Management, KMS & Security




Design and develop services for secure Secrets and Key Management within Kubernetes and cloud environments.
Integrate secrets-management capabilities with Kubernetes workloads and platform services.
Work with KMS, IAM, TLS/certificates and secure service-to-service communication .
Implement secure key lifecycle processes including generation, storage, access and key rotation .
Contribute to platform and Kubernetes cluster hardening.
Apply security best practices across highly automated and distributed environments.
Work with cryptographic concepts such as envelope encryption, DEK/KEK and encryption at rest/in transit .
What We're Looking For
Core Requirements
Strong professional experience developing software with Go / Golang .
Strong hands-on experience with Kubernetes in production environments.
Experience developing Kubernetes Controllers, Operators or Kubernetes-native automation .
Good understanding of Kubernetes APIs and Custom Resource Definitions (CRDs) .
Experience designing or working with distributed systems and cloud-native architectures .
Strong understanding of software engineering principles and API design.
Experience with CI/CD, automation and Infrastructure as Code.
Comfortable troubleshooting complex Kubernetes and platform-level problems.
Security & Secrets Experience




Experience in some of the following areas would be highly valuable:
Secrets Management
Key Management Systems / KMS
IAM
TLS and certificate management
Kubernetes security and cluster hardening
Key rotation
Encryption and applied cryptography
Secure communication between distributed services
Technologies You May Work With
Go / Golang · Kubernetes · Kubernetes API · CRDs · Controllers · Operators · Kubebuilder · controller-runtime · Cluster API · GitOps · ArgoCD · Terraform · Crossplane · KMS · Secrets Management · IAM · TLS · Prometheus · Grafana · OpenTelemetry
Exposure to cryptographic concepts such as AES, RSA, ECDSA, HMAC, envelope encryption and DEK/KEK is a strong plus.
Nice to Have
Experience with Kubebuilder or controller-runtime .
Experience with Cluster API (CAPI) or Crossplane.
Experience building Kubernetes platforms across multiple clusters .
Experience with secure, segmented or air-gapped environments .
Experience building internal developer platforms or self-service infrastructure.
Knowledge of multi-tenancy and policy-as-code.
Experience with OPA/Rego.
Strong understanding of applied cryptography and key-management architectures.
The Profile We're Looking For
You don't need to tick every box.
We're particularly interested in engineers who have a strong Go + Kubernetes engineering background and enjoy building the automation and software that sits behind a cloud platform.
If you have built Kubernetes Controllers, Operators, CRDs or Kubernetes-native platform services , and you are interested in going deeper into Secrets Management, KMS and cloud security , this could be a great fit.

📌 Senior Golang Engineer - Kubernetes Operators (Marzán)
🏢 Lawrence Harvey
📍 Marzán