How we assess
Every applicant goes through 5 gates: application, an AI-assisted screen, a live technical assessment scored by a practice lead, a client-fit interview, and reference and credential checks. The questions below come from the live assessment. We score answers on reasoning and trade-offs, not on recalling definitions.
20 technical questions with model-answer hints
Questions 1–10 (role-specific)
Question 1: How do you decide what goes into a golden path?
Model-answer hint
most common service types, developer research, opinionated defaults, documented escape hatches.
Question 2: How do you design multi-tenancy in Kubernetes?
Model-answer hint
namespaces, RBAC, network policies, quotas; separate clusters when isolation must be hard.
Question 3: ArgoCD or Flux: how do you choose?
Model-answer hint
UI and multi-cluster needs, team familiarity, app-of-apps patterns, ecosystem fit.
Question 4: How do you prevent configuration drift across clusters?
Model-answer hint
Git as the source of truth, automated sync, drift alerts, no manual changes.
Question 5: How would you roll out a breaking change to a shared Helm chart?
Model-answer hint
versioning, deprecation notice, canary tenants, migration tooling.
Question 6: What belongs in a Backstage software template?
Model-answer hint
repository scaffold, CI/CD, infrastructure, observability, ownership metadata, docs.
Question 7: How do you embed security without slowing teams?
Model-answer hint
admission policies with clear messages, approved modules, early pipeline scans.
Question 8: How do you control Kubernetes cost per team?
Model-answer hint
requests and limits, autoscaling, showback, cleaning up idle environments.
Question 9: Which DORA metric would you improve first, and how?
Model-answer hint
depends on baseline; often lead time, via automation and smaller batches.
Question 10: How do you drive platform adoption?
Model-answer hint
product mindset, early adopters, migration support, usage metrics.
Questions 11–20 (Cloud & Complex Systems core)
Question 11: How do you make a service idempotent, and why?
Model-answer hint
idempotency keys, a dedupe store, safe retries under at-least-once delivery.
Question 12: How would you set an SLO for a payment API?
Model-answer hint
success-and-latency SLI, target from history and business need, an error-budget policy.
Question 13: Walk through a zero-downtime database migration.
Model-answer hint
expand and contract, CDC or dual writes, backfill, verification, flag-controlled cut-over, rollback.
Question 14: When do you choose event-driven design over synchronous APIs?
Model-answer hint
decoupling and fan-out versus harder ordering, consistency and debugging.
Question 15: How do you keep Terraform safe across many teams?
Model-answer hint
versioned modules, locked remote state, reviewed plans, policy-as-code, drift detection.
Question 16: What belongs in a good post-mortem?
Model-answer hint
timeline, impact, contributing factors, blameless tone, actions with owners and dates.
Question 17: How do you design for data residency across regions?
Model-answer hint
data classification, region pinning, in-region keys, replication rules, access logging.
Question 18: How do you find the cause of a p99 latency regression?
Model-answer hint
traces, deploy diff, saturation signals, profiling, slow dependencies.
Question 19: Tell us about cutting cloud cost without hurting reliability.
Model-answer hint
rightsizing, commitments, autoscaling, storage tiering, impact measured before and after.
Question 20: How do you evolve an API that external partners depend on?
Model-answer hint
additive changes, versioning, deprecation windows, consumer contract tests.
Interviewer tip: Ask for a real example after every answer. Strong candidates describe what they built, what broke and what they changed.
Practical task
Design a minimal internal developer platform for 80 developers on one cloud: cluster topology, GitOps flow, a Backstage golden-path template for a REST service, 2 Kyverno policies, and the metrics you would report after 90 days.
How to run it Share the brief 24 hours ahead or run it live. Ask the candidate to talk through trade-offs as they work; reasoning matters more than a finished artefact.
Red flags our practice leads watch for
- Builds the platform without talking to the developers who will use it.
- Mandates tools with no escape hatch for legitimate exceptions.
- Cannot explain Kubernetes RBAC or network policies in practice.
- Measures success by features shipped rather than adoption and DORA outcomes.
- Universal flag: Vague answers that never reach a concrete system, number or decision the candidate personally owned.
The scorecard we use
Score each dimension 1–4 (1 = no evidence, 2 = partial, 3 = solid, 4 = exceptional):
| Dimension | Weight | What a 4 looks like |
|---|---|---|
| Technical depth, production judgement and security | 40% | Explains how and why, designs for failure and sensitive data, and knows each tool’s limits |
| Practical task and problem solving | 30% | Delivers a working solution with tests and documented decisions |
| Communication and documentation | 20% | Explains clearly to technical and non-technical audiences, in English or Arabic |
| References and regional context | 10% | References confirm the claimed scope; knows the frameworks and data-residency rules that apply |
Pass bar: weighted average of 3.0 out of 4 or higher, with no dimension below 2. The practice lead approves the final result.