Senior Golang Engineer – Kubernetes Controllers & Secrets Management

About the Role

We are looking for a Senior Golang Engineer to join a cloud platform engineering team building highly automated, secure and scalable cloud-native infrastructure.

This role sits at the intersection of Kubernetes engineering, platform automation and cloud security .

You will work hands-on developing Kubernetes Controllers and Operators in Go , automating the lifecycle of platform services and cloud resources, while contributing to secure Secrets Management and Key Management (KMS) capabilities used across the platform.

This is not simply a role operating Kubernetes. We are looking for engineers interested in building and extending Kubernetes itself through APIs, Controllers, Operators and automation .

What You'll Be Doing

Kubernetes Controllers & Platform Engineering

- Design, develop and maintain Kubernetes Controllers and Operators using Go/Golang .
- Build automation around Kubernetes resources using CRDs and Kubernetes APIs .
- Automate the provisioning, configuration and lifecycle management of cloud and platform resources.
- Build reliable reconciliation and control-loop logic for distributed systems.
- Contribute to multi-cluster Kubernetes environments and platform orchestration.
- Develop internal platform capabilities that enable engineering teams to consume infrastructure and services through automated, self-service workflows.
- Improve CI/CD, GitOps and Infrastructure-as-Code processes.
- Troubleshoot complex Kubernetes and distributed-system issues in production environments.
- Help ensure the reliability, scalability and observability of platform services.

Secrets Management, KMS & Security





- Design and develop services for secure Secrets and Key Management within Kubernetes and cloud environments.
- Integrate secrets-management capabilities with Kubernetes workloads and platform services.
- Work with KMS, IAM, TLS/certificates and secure service-to-service communication .
- Implement secure key lifecycle processes including generation, storage, access and key rotation .
- Contribute to platform and Kubernetes cluster hardening.
- Apply security best practices across highly automated and distributed environments.
- Work with cryptographic concepts such as envelope encryption, DEK/KEK and encryption at rest/in transit .

What We're Looking For

Core Requirements

- Strong professional experience developing software with Go / Golang .
- Strong hands-on experience with Kubernetes in production environments.
- Experience developing Kubernetes Controllers, Operators or Kubernetes-native automation .
- Good understanding of Kubernetes APIs and Custom Resource Definitions (CRDs) .
- Experience designing or working with distributed systems and cloud-native architectures .
- Strong understanding of software engineering principles and API design.
- Experience with CI/CD, automation and Infrastructure as Code.
- Comfortable troubleshooting complex Kubernetes and platform-level problems.

Security & Secrets Experience





Experience in some of the following areas would be highly valuable:

- Secrets Management
- Key Management Systems / KMS
- IAM
- TLS and certificate management
- Kubernetes security and cluster hardening
- Key rotation
- Encryption and applied cryptography
- Secure communication between distributed services

Technologies You May Work With

Go / Golang · Kubernetes · Kubernetes API · CRDs · Controllers · Operators · Kubebuilder · controller-runtime · Cluster API · GitOps · ArgoCD · Terraform · Crossplane · KMS · Secrets Management · IAM · TLS · Prometheus · Grafana · OpenTelemetry

Exposure to cryptographic concepts such as AES, RSA, ECDSA, HMAC, envelope encryption and DEK/KEK is a strong plus.

Nice to Have

- Experience with Kubebuilder or controller-runtime .
- Experience with Cluster API (CAPI) or Crossplane.
- Experience building Kubernetes platforms across multiple clusters .
- Experience with secure, segmented or air-gapped environments .
- Experience building internal developer platforms or self-service infrastructure.
- Knowledge of multi-tenancy and policy-as-code.
- Experience with OPA/Rego.
- Strong understanding of applied cryptography and key-management architectures.

The Profile We're Looking For

You don't need to tick every box.

We're particularly interested in engineers who have a strong Go + Kubernetes engineering background and enjoy building the automation and software that sits behind a cloud platform.

If you have built Kubernetes Controllers, Operators, CRDs or Kubernetes-native platform services , and you are interested in going deeper into Secrets Management, KMS and cloud security , this could be a great fit.

📌 Senior Golang Engineer – Kubernetes Operators (Valencia)
🏢 Lawrence Harvey
📍 Valencia