Cloud Platform Engineer (K8S&NW Specialist)

We dare to believe that we do not need a clear vision to create a future beyond our imagination. PayPay will always stay true to our roots and realize a vision (future) that no one else can imagine by constantly taking risks and challenging ourselves. With this mindset, you will be presented with new and exciting opportunities on a daily basis and have the opportunity to grow and reach new dimensions that you could never have imagined. We are looking for people who can embrace this challenge, refresh the product at breakneck speed and promote PayPay with professionalism and passion.
※ Please note that you cannot apply or be selected in parallel with PayPay Corporation, PayPay Card Corporation and PayPay Securities Corporation.

We are seeking a highly skilled and experienced Platform Engineer to manage and enhance our end-to-end application delivery platform, from CloudFront to the underlying EKS clusters.  Moving beyond standard maintenance, this role combines production infrastructure ownership with software engineering. You will build and scale robust in-house platform tools, develop custom Kubernetes controllers, and automate complex workflows safely.  

The ideal candidate will have a strong foundation across cloud infrastructure, networking, Kubernetes, and service mesh technologies, with deep expertise in at least one of these areas. The candidate will also have production experience in Python or Go and the versatility to become productive in the other. We particularly value engineers who can quickly understand unfamiliar systems, capable of using AI-assisted development effectively while remaining accountable for production stability, code maintainability, and operational safety.

In this role, you will play a pivotal part in raising our engineering velocity and defining the reliability standards of our platform.

• →Develop, maintain, and automate in-house tools, Kubernetes manifest generator engine and scripts using programming languages like Python or Go to improve platform operations and efficiency.
• →Perform upgrades and patching of EKS clusters and associated components, and improve the process through safe, repeatable automation.
• →Manage and optimize related components such as Karpenter (cluster autoscaling) and Argo CD (GitOps continuous delivery).
• →Implement and manage service mesh solutions (e.g., Istio, Linkerd) for enhanced traffic management, security, and observability.
• →Participate in an on-call rotation to provide 24/7 support for critical platform issues and monitor the platform for potential issues and implement preventative measures.
• →Configure and manage CloudFront distributions, WAF web ACLs for efficient & secure content delivery & traffic management.
• →Develop and maintain documentation for platform architecture, processes, and troubleshooting guides.

• AWS: VPC, EC2, ECS, EKS, Lambda, CloudFront, WAF, R53, RDS, ECR, ElastiCache, DynamoDB, S3, CloudWatch, Cognito, SQS, KMS, Secrets Manager, VPC Lattice, IAM.
• IAC: Terraform, Atlantis.
• CICD: Jenkins, Argo CD, Argo Rollouts, Argo Workflows, GitHub Actions.
• Observability: Prometheus, Grafana, OpenTelemetry, Quickwit.
• Platform Tools: Istio, Karpenter, Kyverno, KEDA, Artifactory, AWS Load Balancer Controller, ingress controller, cert-manager.

• Demonstrable experience with advanced software engineering practices, including unit/integration testing.
• Deep understanding of Kubernetes internals and the controller-runtime framework, experience developing, testing, and maintaining custom controllers/operators and CustomResourceDefinitions.
• Proven experience as a Platform Engineer, Site Reliability Engineer (SRE), or similar role with a focus on end-to-end platform ownership.
• Strong understanding and practical experience with Karpenter, Argo CD, Terraform..
• Strong networking fundamentals and the ability to troubleshoot an end-to-end request path across CloudFront, WAF, load balancers, Kubernetes networking, service mesh, and workloads.
• Bachelor's degree in Computer Science, Engineering, or a related field (or equivalent practical experience).

• Prior experience working with service mesh technologies (preferably Istio) in a production environment.
• Demonstrable experience with SSL/TLS certificate management.
• Experience with multi-cluster Kubernetes architectures.
• Experience building AZ isolated, DR architectures.

• Please refer PayPay 5 senses to learn what we value at work.

• Full Time

• Hybrid Workstyle
  ※ You will be expected to work in the office, in alignment with organizational guidelines and team objectives.
• LIFE in JAPAN FACTBOOK

• Super Flex Time (No Core Time)
• In principle, 9:00am-5:45pm + 1h break (actual working hours: 7h45m + 1h break)

• Every Sat/Sun/National holidays (In Japan)/New Year's break/Company-designated Special days

• Annual leave (up to 14 days in the first year, granted proportionally according to the month of employment. Can be used from the date of hire)
• Personal leave (5 days each year, granted proportionally according to the month of employment）
  ＊PayPay's own special paid leave system, which can be used to attend to illnesses, injuries, hospital visits, etc., of the employee, family members, pets, etc.

• Annual salary paid in 12 installments (monthly)
• Based on skills, experience, and abilities
• Reviewed once a year
• Late overtime allowance
  ＊Payroll payment can be changed to digital salary payment “PayPay Paycheck” for an amount set by you

• PayPay Inside-Out (Corporate Blog) /JP
• PayPay Inside-out (Corporate Blog) /ENG
• PayPay Product Blog /JP
• PayPay Product Blog /ENG
• PIVOT動画：【PayPayが仕掛ける金融革命】