Platform Engineer

We are seeking a highly skilled and experienced Platform Engineer to join our dynamic Platform team. In this role, you will be responsible for developing, implementing, and optimizing our cloud-based solutions. Your key responsibilities will include provisioning, debugging, and optimizing cloud infrastructure, as well as managing and securing network communications. You will play a crucial role in troubleshooting complex network issues, managing SSL/TLS certificates, analyzing network traffic, and automating essential tasks through scripting.

You will also be instrumental in designing and deploying cloud security solutions, managing Infrastructure as Code (IaC), and ensuring the overall security and integrity of our cloud infrastructure. Additionally, you will collaborate closely with various internal teams to implement best practices and regularly review existing systems for improvement.

Key Responsibilities:

• Network Troubleshooting: Diagnose and resolve complex network communication issues related to TCP/IP, DNS, and HTTP/HTTPS protocols.
• SSL/TLS Management: Manage and troubleshoot SSL/TLS certificates, addressing issues such as misconfigurations, expirations, and incorrect chaining.
• Traffic Interception & Analysis: Intercept, capture, and analyze network traffic using tools like Wireshark, Fiddler, Charles Proxy, and tcpdump to identify and
• resolve issues.
• HTTPS Traffic Inspection: Decrypt and inspect HTTPS traffic to diagnose secure communication issues and potential security vulnerabilities.
• HTTP Request/Response Analysis: Analyze HTTP requests and responses, including headers, status codes, cookies, and security configurations (e.g.,
• CORS, CSP).
• Automation & Scripting: Develop and maintain scripts and tools (using Python, Bash, PowerShell, etc.) to automate network monitoring, traffic analysis, and
• related tasks.

Infrastructure Responsibilities:

• Infrastructure as Code: Create, maintain, and improve the core "Infrastructure As Code" supporting Boku systems using tools such as Terraform, Puppet, and
• FluxCD.
• Cloud Security: Design, develop, and deploy cloud security solutions, including encryption, key management, SSL certificate management, and patch
• management.
• System Improvement: Regularly review existing systems, make recommendations, and implement improvements to optimize performance and security.
• Documentation & Reporting: Document findings, create detailed reports, and communicate complex technical issues to non-technical stakeholders.
• Collaboration: Work closely with internal teams (Data, IT, Engineering) to implement best practices and ensure the integrity and security of network
• communications.

Qualifications:

• Education: Bachelor's degree in Computer Science, Security, or a related field, or equivalent experience.
• Experience:
  • 3+ years in security engineering, infrastructure engineering, or a related field.
  • 5+ years of experience in network communication, SSL/TLS management, and traffic analysis.
  • Proven experience with tools like Wireshark, Fiddler, tcpdump, or Burp Suite.
  • Deep understanding of TCP/IP, HTTP/HTTPS, DNS, and SSL/TLS protocols.
  • Proficiency in scripting languages such as Python, Bash, or PowerShell.
  • Experience managing, analyzing, and troubleshooting highly available and distributed systems.
  • Hands-on experience securing production environments in AWS, with access to sensitive and confidential customer data.
  • Experience with container orchestration (Kubernetes, Docker) and deployment automation tools (Jenkins, Puppet, Ansible).
  • Familiarity with Terraform, Helm, Prometheus, and FluxCD.
  • In-depth knowledge of AWS and AWS security best practices.

Key Skills:

• AWS
• Wireshark, tcpdump
• TCP/IP, HTTP/HTTPS, DNS, SSL/TLS protocols
• Security engineering
• Encryption and key management
• SSL certificate management
• Patch management
• Kubernetes and EKS
• FluxCD
• Terraform, Helm, Puppet