Platform Engineer

Boku Inc. (BOKU.L) is the leading global provider of local mobile-first payments solutions. Global brands including Amazon, DAZN, Meta, Google, Microsoft, Netflix, Sony, Spotify, and Tencent rely on Boku to reach millions of new paying consumers who do not use credit cards with our purpose-built payment network of more than 250 local payment methods that reach 7 billion accounts across 65 countries. Every year, Boku processes over $9 billion in value for our customers. Incorporated in 2008, Boku is headquartered in London and San Francisco and has employees in over 39 countries around the world, including Brazil, China, Estonia, Germany, Ireland, Japan, Singapore, and the UAE. Boku is a truly global company that takes pride in its diversity and thriving equal opportunity workplace.

We are seeking a highly skilled and experienced Platform Engineer to join our dynamic Platform team. In this role, you will be responsible for developing, implementing, and optimizing our cloud-based solutions. Your key responsibilities will include provisioning, debugging, and optimizing cloud infrastructure, as well as managing and securing network communications. You will play a crucial role in troubleshooting complex network issues, managing SSL/TLS certificates, analyzing network traffic, and automating essential tasks through scripting.

You will also be instrumental in designing and deploying cloud security solutions, managing Infrastructure as Code (IaC), and ensuring the overall security and integrity of our cloud infrastructure. Additionally, you will collaborate closely with various internal teams to implement best practices and regularly review existing systems for improvement.

Key Responsibilities:

• Network Troubleshooting: Diagnose and resolve complex network communication issues related to TCP/IP, DNS, and HTTP/HTTPS protocols.
• SSL/TLS Management: Manage and troubleshoot SSL/TLS certificates, addressing issues such as misconfigurations, expirations, and incorrect chaining.
• Traffic Interception & Analysis: Intercept, capture, and analyze network traffic using tools like Wireshark, Fiddler, Charles Proxy, and tcpdump to identify and resolve issues.
• HTTPS Traffic Inspection: Decrypt and inspect HTTPS traffic to diagnose secure communication issues and potential security vulnerabilities.
• HTTP Request/Response Analysis: Analyze HTTP requests and responses, including headers, status codes, cookies, and security configurations (e.g., CORS, CSP).
• Automation & Scripting: Develop and maintain scripts and tools (using Python, Bash, PowerShell, etc.) to automate network monitoring, traffic analysis, and related tasks.

Infrastructure Responsibilities:

• Infrastructure as Code: Create, maintain, and improve the core "Infrastructure As Code" supporting Boku systems using tools such as Terraform, Puppet, and FluxCD.
• Cloud Security: Design, develop, and deploy cloud security solutions, including encryption, key management, SSL certificate management, and patch management.
• System Improvement: Regularly review existing systems, make recommendations, and implement improvements to optimize performance and security.
• Documentation & Reporting: Document findings, create detailed reports, and communicate complex technical issues to non-technical stakeholders.
• Collaboration: Work closely with internal teams (Data, IT, Engineering) to implement best practices and ensure the integrity and security of network communications.

Qualifications:

• Education: Bachelor's degree in Computer Science, Security, or a related field, or equivalent experience.
• Experience:
  • 3+ years in security engineering, infrastructure engineering, or a related field.
  • 5+ years of experience in network communication, SSL/TLS management, and traffic analysis.
  • Proven experience with tools like Wireshark, Fiddler, tcpdump, or Burp Suite.
  • Deep understanding of TCP/IP, HTTP/HTTPS, DNS, and SSL/TLS protocols.
  • Proficiency in scripting languages such as Python, Bash, or PowerShell.
  • Experience managing, analyzing, and troubleshooting highly available and distributed systems.
  • Hands-on experience securing production environments in AWS, with access to sensitive and confidential customer data.
  • Experience with container orchestration (Kubernetes, Docker) and deployment automation tools (Jenkins, Puppet, Ansible).
  • Familiarity with Terraform, Helm, Prometheus, and FluxCD.
  • In-depth knowledge of AWS and AWS security best practices.

Key Skills:

• AWS
• Wireshark, tcpdump
• TCP/IP, HTTP/HTTPS, DNS, SSL/TLS protocols
• Security engineering
• Encryption and key management
• SSL certificate management
• Patch management
• Kubernetes and EKS
• FluxCD
• Terraform, Helm, Puppet