Senior Security Engineer, Network & Zero Trust

Role overview Own the network security workstream of a zero-trust program spanning Kubernetes clusters, cloud accounts, and the connections between them. This hands-on engineering role focuses on making access explicit, tied to verified service identity, and visible in operational telemetry while rolling out controls safely across teams.

Responsibilities - Design and maintain default-deny network segmentation for Kubernetes workloads, deriving policies from observed traffic and expanding coverage as the environment changes. - Implement encrypted, mutually authenticated service-to-service connections and support per-application private access for engineers and operators. - Maintain an up-to-date inventory of network paths, including cloud network links, tunnels, cross-account connections, and public entry points. - Enforce boundaries around production and cardholder-data systems; review exposures and peerings, and conduct segmentation tests with security partners. - Provide network flow telemetry with useful workload identity context and integrate it with the security monitoring platform. - Manage cluster admission policies and network configuration through reviewed code and infrastructure pipelines, using staged rollouts to limit disruption.

Requirements - Senior-level experience engineering network security controls across cloud and Kubernetes environments. - Practical experience with micro-segmentation, network policy, service identity, and mutual TLS. - Ability to automate and manage infrastructure and security configuration as reviewed code. - Experience rolling out controls across teams safely, including observing traffic before enforcing policy. - Ability to build network visibility and telemetry that supports investigation and detection.

Nice to have Experience with regulated environments, cardholder-data boundaries, private access or ZTNA, and AI-assisted workflows for traffic analysis or policy review.

Benefits and work setup The listing describes the position as full-time and remote. It gives a gross monthly compensation range of USD 5,000–9,500, depending on experience.