Senior Security Engineer
Core
Design and enforce east-west and north-south network segmentation, identity-aware encrypted service-to-service connections, and automated drift detection across Kubernetes clusters in production and cardholder-data environments.
Role type
Senior Security Engineer (Cloud Network & Kubernetes)
Builds
Production-grade network controls, segmentation policies, and automated security tooling for cloud-native environments.
Domain
Cloud Security, Kubernetes Networking, Zero Trust Architecture
Required skills
Kubernetes networking (CNI, NetworkPolicy, DNS, ingress/egress), AWS networking (VPC, Transit Gateway, PrivateLink), mTLS and service mesh implementation, Infrastructure as Code (Terraform, Helm), Go/Python/Bash scripting, SIEM integration, PCI DSS compliance
Preferred skills
Cilium, eBPF, Istio, SPIFFE/SPIRE, OPA/Gatekeeper, Kyverno, ZTNA, IDS/IPS, anomalous-flow detection
Technologies
Kubernetes, AWS, Terraform, Helm, Go, Python, Bash, mTLS, Service Meshes, SIEM, Cilium, eBPF, Istio, SPIFFE, OPA, Kyverno
Responsibilities
Own east-west network segmentation and default-deny NetworkPolicy controls; Design and roll out identity-aware, encrypted service-to-service connections; Build and reconcile network maps covering VPCs and cross-account links; Enforce segmentation for production and cardholder-data environments; Manage workload admission controls and automated drift detection; Develop tooling, automation, and AI-assisted workflows for security policy generation and flow analysis.
Seniority
Senior, hands-on IC
