Go (Golang) Developer – K8s-based Component for Application-Level Encryption

Experience: 7+ Yrs

Location: EU Countries (Preferred Germany, Poland, Romania) Remote 

Rate: 30-35 eur/h (Open to discussing the rate with candidates who have more than 7 years of experience)

Summary

We’re seeking an experienced IT consultant with 7 years of experience to join our team for a critical infrastructure project that’s focused on enhancing platform security. Our client is in the process of implementing a robust, scalable solution for customer-specific application-level data encryption, and we need an expert to help bring this vision to life.

Project Highlights:

·      Client Focus: Critical infrastructure security for sensitive customer data

·      Key Areas: Application-level encryption, tenant isolation, key management

·      Internal Collaboration: Work closely with the client's architecture team to implement encryption solutions

Requirements

• Go (Golang): Proven, hands-on experience in Go is essential. The candidates will be responsible for developing both the sidecar and the central gateway service. Python skills, in addition, would be great.
• gRPC: Demonstrable experience in designing and implementing APIs using gRPC for low-latency, reliable inter-service communication.
• Kubernetes (k8s): Solid understanding of Kubernetes concepts, including the sidecar pattern, stateful services, deployments, and api extensions. Basic understanding of Istio as a service mesh. Observability basic.
• Cryptography Basics: A practical understanding of fundamental cryptographic concepts is necessary. Candidates should be familiar with the roles of Data Encryption Keys (DEKs), Key Encryption Keys (KEKs), and the general principles of envelope encryption and secure key caching. They do not need to be cryptography experts, but must be comfortable working with cryptographic APIs/SDKs.
• Relational Databases (RDBMS): Experience with RDBMS is needed, as the central service will optionally require a persistence layer for managing metadata and encrypted key materials.
• SAP BTP: Several services from SAP BTP are to be used (in particular, KMS), and therefore, previous experience in SAP BTP is desirable.