Below are the details of the requirements
Experience
7+ Yrs
Location
EU Countries (Preferred Germany, Poland, Romania)
Is it a remote working?
Yes
We are looking for an experienced IT consultant in the context of a critical infrastructure project for our client. They are in the process of enhancing the security posture of their platform by implementing a robust, scalable solution for a customer specific application-level data encryption.
Their internal architecture team has defined a specific approach for this initiative, and they are now seeking external expertise to assist with the implementation. The project involves building a hybrid system designed to protect sensitive customer data before it reaches any persistence layer, ensuring strong tenant isolation and efficient key management.
To successfully execute the project, our client is looking for 1-3 candidates with a strong technical background and specific expertise in the following areas:
Go (Golang):
Proven, hands-on experience in Go is essential. The candidates will be responsible for developing both the sidecar and the central gateway service.
Python skills
in addition would be great.
gRPC:
Demonstrable experience in designing and implementing APIs using gRPC for low-latency, reliable inter-service communication.
Kubernetes (k8s):
Solid understanding of Kubernetes concepts, including the sidecar pattern, stateful services, deployments and api extensions. Basic understanding of istio as a service mesh. Observability basic.
Cryptography Basics:
A practical understanding of fundamental cryptographic concepts is necessary. Candidates should be familiar with the roles of Data Encryption Keys (DEKs), Key Encryption Keys (KEKs), and the general principles of envelope encryption and secure key caching. They do not need to be cryptography experts but must be comfortable working with cryptographic APIs/SDKs.
Relational Databases (RDBMS):
Experience with RDBMS is needed, as the central service will optionally require a persistence layer for managing metadata and encrypted key materials.
SAP BTP:
several services from SAP BTP are to be used (in particular, KMS) and therefore previous experience in SAP BTP is desirable.
Our client is looking for individuals who can work independently, adhere to best practices for security-sensitive code, and contribute to building a resilient and highly available system.
Kindly let us know the availability of consultants who meet these requirements. We would be grateful if you could provide us with information on potential candidates and their experience profiles.