Senior Security Engineer, Network & Zero Trust

📋 Description

• Own east-west segmentation across Kubernetes clusters: design segmentation model, derive network
• Deliver identity-aware transport: design and roll out mutually authenticated, encrypted
• Keep live map of the network: VPC peerings, tunnels, cross-account links, public entry points
• Own segmentation of production and cardholder-data environment: implement and enforce CDE and
• Partner with IT on private access: evaluate and help deliver per-application access (ZTNA)
• Own network telemetry: flow logs east-west and north-south, feed to SIEM

🎯 Requirements

• 6+ years of experience in security, network, platform, or infrastructure engineering with hands-on
• Deep practical Kubernetes networking knowledge: CNI, NetworkPolicy semantics, DNS, ingress/egress
• Strong AWS networking: VPCs, subnets, security groups, peering and Transit Gateway, PrivateLink
• Hands-on experience with mTLS and service-to-service authentication (service mesh, proxies, or
• Infrastructure as code as default way of working – Terraform and Helm or equivalents, through merge
• Ability to write real code (Go, Python, or Bash) for tooling and automation

🎁 Benefits

• Competitive salary
• Remote work
• Full-time position