Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Engineer and automate infrastructure for cutting-edge network APIs in a dynamic environment.
- Company: Join BT, a pioneering telecom company with a rich heritage and innovative spirit.
- Benefits: Enjoy competitive pay, generous leave, and exclusive discounts on BT services.
- Why this job: Be part of a transformative team shaping the future of mobile networks.
- Qualifications: Experience in infrastructure engineering, Kubernetes, and automation tools is essential.
- Other info: Access world-class training and development opportunities for your career growth.
The predicted salary is between 36000 - 60000 £ per year.
Network-as-a-service (NaaS) is a strategic enabler within BT's mobile network architecture, designed to unlock and expose core network capabilities in a reliable and commercially governed manner. NaaS provides centralized API exposure capabilities, allowing BT to publish and manage GSMA CAMARA aligned APIs in a secure, traceable, and programmatic manner. This role ensures the underlying multi-site, resilient, automated, secure infrastructure powering NaaS APIs is engineered, governed and operated to carrier-grade standards. You will design and automate infrastructure for Kubernetes-hosted network APIs, API gateways (Apigee/Kong), identity and consent services, routing and aggregator integrations - with a strong emphasis on PKI, certificate lifecycle automation, secrets management (Vault) and gateway-level security.
Responsibilities:
- Engineer infrastructure supporting dual-site deployments on BT's private cloud ecosystem with active/active or active/standby failover patterns.
- Maintain Kubernetes workloads deployed via Helm charts and environment-specific configuration pipelines used in NaaS delivery.
- Optimise cluster networking, pod-to-pod routing, overlay networks, and VPC connectivity required for NaaS northbound/southbound integration.
- Standardise GitLab-based deployment automation used across NaaS (e.g., templated Helm chart rollouts, environment switching, version promotion).
- Create automated patterns for repetitive run tasks: certificate rotation, namespace creation, resource onboarding and gateway policy application.
- Configure and operate NGINX (Ingress) and Kong API Gateway for internal/external API exposure, including routing, transformations, policies, plugins, and rate limiting.
- Build automation pipelines for dynamic secrets, lease renewal, token lifecycle and secret-rotation using Vault Agents or sidecar models.
- Ensure API services and ingress components follow strict Zero-Trust and mTLS standards.
- Operate Kong API Gateway with automated provisioning of routes, consumers, plugins, certificates, OAuth/OIDC configs, and rate-limit/security policies.
- Instrument NGINX and Kong with structured logging, metrics, gateway tracing and plugin-level observability.
- Validate multi-site GSLB routing for API flows using synthetic probes, ingress/gateway failover testing and API path validation.
- Strong Linux fundamentals and troubleshooting (system performance, networking, storage).
- Practical understanding of L7/L4 load balancing, service mesh, DNS/GSLB, certificate management and API connectivity patterns into telco/core systems.
- Strong understanding of CA hierarchies, mTLS, certificate lifecycle management, CRL/OCSP, key rotation, HSM/KMS.
- Ability to design automated certificate workflows for Kubernetes, gateways, and service mesh.
- Deep configuration experience (ingress rules, SSL termination, upstream configuration, rewrite/redirect rules) on NGINX including performance tuning, rate limiting, mTLS enforcement, header-based routing etc.
- Understanding of service registration, upstream health checks, traffic routing, consumer management etc.
- Expertise with Kong plugins (JWT, ACL, rate limit, key auth, OIDC, mTLS), declarative configs (Kong YAML), and Ingress Controller.
- Access, use, and disclose information only as required for the job; ensure appropriate safeguards and adherence to Information Security policies.
- Familiarity with Hashicorp Vault.
- Familiarity with ITIL/incident management and change practices (or equivalent experience).
- Excellent verbal and written communication and interpersonal skills.
Nice to have:
- Expertise in automating secret delivery via Vault Agent, Vault Injector or GitLab CI integration.
- Automation mindset: scripting (Python/Bash) + one or more of Terraform/Ansible/Helm/Kustomize/GitOps.
- Experience designing observability for serverless systems (logs/metrics/traces) and implementing distributed tracing and dashboards using open standards and various tooling like Elastic, Grafana etc.
- CAMARA and TMF-931 familiarity; API aggregator marketplace exposure (e.g., AWS/Vonage/NAC listings).
- Experience with network automation (YANG/NETCONF/RESTCONF, Ansible) and telco workloads.
- Kubernetes certification (e.g., CKA/CKAD).
Benefits:
- 10% on target bonus
- BT Pension scheme, minimum 5% Employee contribution, BT contribution 10%
- Life Assurance Cover
- Exclusive colleague discounts on our latest and greatest BT broadband packages, BT TV with TNT Sports and NOW Entertainment
- From January 2025, equal family leave: receive 18 weeks at full pay, 8 weeks at half pay and 26 weeks at the statutory rate. It’s for all parents, no matter how your family is made up.
- Enhanced women’s health support: including help with menopause symptoms, cancer screenings, period care and more.
- 25 days annual leave (not including bank holidays), increasing with service
- 24/7 private virtual GP appointments for UK colleagues
- 2 weeks carer’s leave
- World-class training and development opportunities
- Option to join BT Shares Saving schemes
Infrastructure Engineer employer: BT Group
Contact Detail:
BT Group Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Infrastructure Engineer
✨Tip Number 1
Network with industry professionals! Attend meetups, webinars, or conferences related to infrastructure engineering. It's a great way to make connections and learn about job openings that might not be advertised.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, especially those involving Kubernetes, API gateways, and automation. This can really set you apart when you're chatting with potential employers.
✨Tip Number 3
Practice your interview skills! Get a friend to do mock interviews with you, focusing on technical questions related to NaaS, security protocols, and infrastructure design. The more comfortable you are, the better you'll perform.
✨Tip Number 4
Apply through our website! We often have exclusive roles listed there, and it’s the best way to ensure your application gets seen by the right people. Plus, you’ll be part of a company that values innovation in the telecom sector!
We think you need these skills to ace Infrastructure Engineer
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the Infrastructure Engineer role. Highlight your experience with Kubernetes, API gateways, and automation tools like Terraform or Ansible. We want to see how your skills align with what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about the role and how your background makes you a perfect fit. Don't forget to mention any relevant projects or achievements that showcase your expertise.
Showcase Your Technical Skills: In your application, be sure to highlight your technical skills, especially around Linux, networking, and security practices. We love seeing specific examples of how you've tackled challenges in these areas, so don't hold back!
Apply Through Our Website: We encourage you to apply through our website for the best chance of getting noticed. It’s super easy, and you'll be able to keep track of your application status. Plus, we love seeing candidates who take the initiative to apply directly!
How to prepare for a job interview at BT Group
✨Know Your Tech Inside Out
Make sure you’re well-versed in the technologies mentioned in the job description, like Kubernetes, NGINX, and Kong API Gateway. Brush up on your understanding of certificate management and automation tools like Hashicorp Vault. Being able to discuss these topics confidently will show that you're not just familiar with them, but that you can apply them effectively.
✨Demonstrate Your Problem-Solving Skills
Prepare to discuss specific challenges you've faced in previous roles, especially those related to infrastructure engineering. Think about how you optimised cluster networking or automated repetitive tasks. Use the STAR method (Situation, Task, Action, Result) to structure your answers and highlight your problem-solving abilities.
✨Show Your Automation Mindset
Since this role emphasises automation, be ready to talk about your experience with scripting languages like Python or Bash, and tools like Terraform or Ansible. Share examples of how you've implemented automation in past projects, particularly in relation to API management or infrastructure deployment.
✨Ask Insightful Questions
Interviews are a two-way street, so prepare some thoughtful questions about the team, the technology stack, or the company’s future plans for NaaS. This shows your genuine interest in the role and helps you assess if it’s the right fit for you. Plus, it gives you a chance to engage with your interviewers on a deeper level.
