Senior Security Engineer, Network & Zero Trust

📋 Description

• Own east-west segmentation across Kubernetes clusters, deriving network policies from observed
• Design and roll out mutually authenticated, encrypted service-to-service connections (mTLS) for
• Maintain a live map of the network (VPC peerings, tunnels, cross-account links, public entry
• Own segmentation of production and cardholder-data environment, enforce CDE and high-trust-tier
• Partner with IT on per-application private access (ZTNA) for engineers and operators
• Own network telemetry: flow logs east-west and north-south with identity, feeding SIEM for detection

🎯 Requirements

• 6+ years of experience in security, network, platform, or infrastructure engineering with hands-on
• Deep, practical Kubernetes networking knowledge: CNI, NetworkPolicy semantics, DNS, ingress/egress
• Strong AWS networking: VPCs, subnets, security groups, peering and Transit Gateway, PrivateLink
• Hands-on experience with mTLS and service-to-service authentication (service mesh, proxies, or
• Infrastructure as code as default way of working — Terraform and Helm or equivalents, through merge
• Ability to write real code (Go, Python, or Bash) for tooling and automation, not only configuration

🎁 Benefits

• Work with cutting-edge technology in fintech and payments
• AI-assisted engineering as standard part of work
• Opportunity to own network pillar of zero-trust program
• Collaborative team environment
• Remote-friendly (company culture mentions flexibility)
• Competitive compensation