Senior Golang Engineer – Kubernetes Controllers &

- Secrets Management

About the Role

We are looking for a Senior Golang Engineer to join a cloud platform engineering team building highly automated, secure and scalable cloud-native infrastructure.

This role sits at the intersection of Kubernetes engineering, platform automation and cloud security .

You will work hands-on developing Kubernetes Controllers and Operators in Go , automating the lifecycle of platform services and cloud resources, while contributing to secure Secrets Management and Key Management (KMS) capabilities used across the platform.

This is not simply a role operating Kubernetes. We are looking for engineers interested in building and extending Kubernetes itself through APIs, Controllers, Operators and automation .

What Youll Be Doing

Kubernetes Controllers &

- Platform Engineering

Design, develop and maintain Kubernetes Controllers and Operators using Go/Golang .

Build automation around Kubernetes resources using CRDs and Kubernetes APIs .

Automate the provisioning, configuration and lifecycle management of cloud and platform resources.

Build reliable reconciliation and control-loop logic for distributed systems.

Contribute to multi-cluster Kubernetes environments and platform orchestration.

Develop internal platform capabilities that enable engineering teams to consume infrastructure and services through automated, self-service workflows.

Improve CI/CD, GitOps and Infrastructure-as-Code processes.

Troubleshoot complex Kubernetes and distributed-system issues in production environments.

Help ensure the reliability, scalability and observability of platform services.

Secrets Management, KMS &

- Security





Design and develop services for secure Secrets and Key Management within Kubernetes and cloud environments.

Integrate secrets-management capabilities with Kubernetes workloads and platform services.

Work with KMS, IAM, TLS/certificates and secure service-to-service communication .

Implement secure key lifecycle processes including generation, storage, access and key rotation .

Contribute to platform and Kubernetes cluster hardening.

Apply security best practices across highly automated and distributed environments.

Work with cryptographic concepts such as envelope encryption, DEK/KEK and encryption at rest/in transit .

What Were Looking For

Core Requirements

Strong professional experience developing software with Go / Golang .

Strong hands-on experience with Kubernetes in production environments.

Experience developing Kubernetes Controllers, Operators or Kubernetes-native automation .

Good understanding of Kubernetes APIs and Custom Resource Definitions (CRDs) .

Experience designing or working with distributed systems and cloud-native architectures .

Strong understanding of software engineering principles and API design.

Experience with CI/CD, automation and Infrastructure as Code.

Comfortable troubleshooting complex Kubernetes and platform-level problems.

Security &

- Secrets Experience





Experience in some of the following areas would be highly valuable:

Secrets Management

Key Management Systems / KMS

IAM

TLS and certificate management

Kubernetes security and cluster hardening

Key rotation

Encryption and applied cryptography

Secure communication between distributed services

Technologies You May Work With

Go / Golang ·

- Kubernetes ·
- Kubernetes API ·
- CRDs ·
- Controllers ·
- Operators ·
- Kubebuilder · controller-runtime ·
- Cluster API ·
- GitOps ·
- ArgoCD ·
- Terraform ·
- Crossplane ·
- KMS ·
- Secrets Management ·
- IAM ·
- TLS ·
- Prometheus ·
- Grafana ·
- OpenTelemetry

Exposure to cryptographic concepts such as AES, RSA, ECDSA, HMAC, envelope encryption and DEK/KEK is a strong plus.

Nice to Have

Experience with Kubebuilder or controller-runtime .

Experience with Cluster API (CAPI) or Crossplane.

Experience building Kubernetes platforms across multiple clusters .

Experience with secure, segmented or air-gapped environments .

Experience building internal developer platforms or self-service infrastructure.

Knowledge of multi-tenancy and policy-as-code.

Experience with OPA/Rego.

Strong understanding of applied cryptography and key-management architectures.

The Profile Were Looking For

You dont need to tick every box.

Were particularly interested in engineers who have a strong Go + Kubernetes engineering background and enjoy building the automation and software that sits behind a cloud platform.

If you have built Kubernetes Controllers, Operators, CRDs or Kubernetes-native platform services , and you are interested in going deeper into Secrets Management, KMS and cloud security , this could be a great fit.

📌 Senior Golang Engineer - Kubernetes Operators (Palma)
🏢 Lawrence Harvey
📍 Palma