Senior Security Engineer, Network & Zero Trust
New
J
JobgetherCybersecurity
Listing location: India; Workplace type: RemoteFull-TimeSenior
Salary5,000 - 9,500 USD per month
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 6 years of experience in security, network, platform, or infrastructure engineering
- Required Skills
- PythonBashGoTerraformHelm
Requirements
- At least 6 years of experience in security, network, platform, or infrastructure engineering, including hands-on ownership of network controls in cloud production environments.
- Practical knowledge of Kubernetes networking, including CNIs, NetworkPolicy semantics, DNS, ingress and egress traffic, and safe segmentation rollouts.
- Extensive experience with AWS networking, including VPCs, subnets, security groups, VPC peering, Transit Gateway, PrivateLink, load balancers, and VPC Flow Logs.
- Hands-on experience implementing mTLS and service-to-service authentication through service meshes, proxies, or CNI-level encryption.
- Proficiency in infrastructure as code, particularly Terraform and Helm or equivalent tools, and experience with Git, merge requests, and CI/CD pipelines.
- Strong programming and scripting skills in Go, Python, or Bash, with the ability to build security tools and automation.
- Experience investigating network and security issues using packet captures, flow logs, and system-level telemetry.
- Working knowledge of PCI DSS network security requirements, including segmentation, cardholder data environment scoping, and segmentation testing.
- Demonstrated experience using AI-assisted engineering tools such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Preferred: production experience with Cilium, eBPF, Hubble or equivalent observability tools, mTLS at scale, service meshes, SPIFFE/SPIRE, ZTNA, policy-as-code, and admission-control technologies.
- Preferred: experience with threat detection, intrusion detection and prevention, anomalous traffic analysis, incident containment, and security/compliance frameworks.
- Preferred: experience in fintech, payments, BNPL, or other regulated industries; bachelor's degree in Computer Science, Computer Engineering, or a related technical field.
Responsibilities
- Design, implement, and improve network segmentation across Kubernetes clusters, including default-deny policies and authorized workload communication.
- Develop identity-aware, mutually authenticated, encrypted service-to-service communication using mTLS and service identity mechanisms.
- Maintain an inventory and map of network connectivity, including AWS VPCs, peerings, tunnels, cross-account connections, and public endpoints.
- Implement network security boundaries for production infrastructure and cardholder data environments, including segmentation and security testing.
- Evaluate and implement ZTNA solutions and identity-aware access controls with IT teams.
- Build network telemetry pipelines for east-west and north-south traffic and integrate relevant data with SIEM platforms.
- Manage Kubernetes workload admission controls, firewall rules, and cloud security configurations through infrastructure as code.
- Automate configuration-drift detection, approved changes through CI/CD, and remediation of unauthorized modifications.
- Create rapid workload or network-segment containment capabilities and contribute to incident investigation and response.
- Participate in threat modeling, architecture reviews, on-call rotation, and AI-assisted security engineering workflows.
View Full Description & ApplyYou'll be redirected to the employer's site
