Worked on the envoyproxy/gateway repository to deliver dynamic hot-reload of xDS server TLS configuration in GatewayNamespaceMode, enabling certificate updates without requiring gateway restarts. Developed a new LoadServerTLSConfig helper in Go, allowing seamless TLS configuration changes and reducing operational risk during certificate rotations. The approach included refactoring the TLS load path for improved maintainability and clearer separation of concerns. Automated tests were added to ensure reliability and validate rollback behavior, supporting zero-downtime reloads. Focused on backend development and gRPC integration, the work addressed both feature delivery and a targeted bug fix, demonstrating depth in secure, maintainable infrastructure engineering.