Senior Security Engineer, Network & Zero Trust

📋 Description

• Own east-west segmentation across Kubernetes clusters, design segmentation model, derive network
• Deliver identity-aware mTLS service-to-service authentication
• Keep a live map of the network: VPC peerings, tunnels, cross-account links, public entry points
• Own segmentation of production and cardholder-data environment, enforce CDE and high-trust-tier
• Partner with IT on private access (ZTNA) for engineers and operators
• Own network telemetry: flow logs east-west and north-south, feed to SIEM for detection team

🎯 Requirements

• 6+ years experience in security, network, platform, or infrastructure engineering with hands-on
• Deep practical Kubernetes networking: CNI, NetworkPolicy, DNS, ingress/egress
• Strong AWS networking: VPCs, subnets, security groups, peering, Transit Gateway, PrivateLink, load
• Hands-on experience with mTLS and service-to-service authentication
• Infrastructure as code: Terraform, Helm, CI/CD
• Ability to write code (Go, Python, Bash) for tooling

🎁 Benefits

• Salary range $5,000 - $9,500 per month gross (USD)
• AI-assisted engineering standard
• Collaborative team environment
• Remote work
• Dynamic startup culture with diverse team members