Senior Security Engineer
Core
Design and enforce zero-trust network segmentation, identity-aware connectivity, and security controls across Kubernetes clusters in AWS.
Role type
Senior Security Engineer (Cloud Network & Zero Trust)
Builds
mTLS-encrypted service-to-service connectivity, VPC peering, ZTNA, and automated drift remediation tooling.
Domain
Cloud Security, Kubernetes Networking, Zero Trust Architecture
Required skills
Kubernetes networking (CNI, NetworkPolicy), AWS networking (VPC, Transit Gateway), mTLS, Terraform, Go/Python/Bash, SIEM integration, PCI DSS knowledge
Preferred skills
Cilium, eBPF, service meshes, SPIFFE/SPIRE, ZTNA, policy-as-code, SOC 2, FFIEC
Technologies
Kubernetes, AWS, Terraform, Helm, Go, Python, Bash, SIEM, mTLS, Cilium, eBPF, SPIFFE, ZTNA
Responsibilities
Design and roll out mTLS-encrypted service-to-service connectivity; Manage admission controls, security groups, and firewall rules; Build rapid containment capabilities and participate in incident response; Develop tooling for flow analysis and drift remediation; Enforce production and cardholder-data environment boundaries.
Seniority
Senior, hands-on IC
