Playwright Automation for Akamai Portals
Publicada el 2026-08-01
Descripción de la oferta
# Senior Playwright Engineer: Enterprise Session & Akamai Bot Manager Resilience We are looking for an expert Playwright Engineer to refactor our data-ingestion automation layer. Our internal SaaS platform gathers authorized partner metrics from portals protected by modern security suites, specifically **Akamai Bot Manager**. Currently, our automated workflows suffer from frequent session invalidation and automated driver detection. We need a robust, production-grade Playwright (TypeScript) implementation built around long-lived session state persistence and resilient authentication. --- ## Key Technical Objectives * **Playwright Native Architecture:** Leverage Playwright context management and `storageState` to maximize session longevity and minimize fresh login triggers. * **WAF & Telemetry Consistency:** Configure execution contexts (both headful and headless) to eliminate default automation flags, ensuring TLS fingerprints, `navigator` properties, and browser telemetry match legitimate user contexts. * **Complex MFA/OTP Integration:** Implement automated MFA hooks (Twilio SMS webhooks, IMAP/email listeners, or encrypted TOTP secrets) to handle dynamic auth challenges seamlessly. * **Graceful Fallback:** Detect unexpected WAF blocks, CAPTCHAs, or HTTP 403 responses instantly, cleanly pausing execution or alerting an operator rather than causing account lockouts. --- ## Deliverables 1. **Production Automation Framework (TypeScript):** A modular Playwright framework capable of logging into target portals, maintaining valid `storageState` across executions, and running daily data-gathering flows. 2. **Session & Telemetry Modules:** Helpers for persistent cookie/storage management, automated driver flag mitigation, and dynamic OTP payload ingestion. 3. **CI/CD Integration & Docker Support:** Fully containerized setup ready for CI pipelines with environment-based secret injection. 4. **Documentation:** Comprehensive guide covering local execution, CI deployment, handling expired sessions, and updating browser context configurations as security rules evolve. --- ## Acceptance Criteria * **Stable Session Persistence:** The application correctly reuses `storageState` across consecutive automated runs without triggering repeated login workflows. * **Resilient Failure Handling:** In the event of an expired session or unexpected security challenge, the framework catches the error, redacts sensitive details from logs/screenshots, and cleanly exits or requests manual intervention. * **Zero Secrets in Code:** Credentials, session tokens, and OTP secrets are loaded entirely from secure environment variables. * **Clean CI Execution:** Framework successfully executes within a headless Docker environment using standard Playwright condition waits (no hardcoded fixed timeouts).
Skills
Fuente original: freelancer