Senior Security Engineer, Network & Zero Trust

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Engineer, Network & Zero Trust based in India.

This is an exciting opportunity for an experienced security engineer to shape and strengthen a modern Zero Trust security architecture across cloud infrastructure and Kubernetes environments. You will take ownership of network segmentation, service identity, secure connectivity, and network visibility to ensure that every connection is explicitly authorized and continuously monitored. Working closely with security, platform, and identity teams, you will design and implement controls that protect production systems and sensitive data without disrupting engineering delivery. The role combines hands-on development, infrastructure automation, incident response, and security architecture in a cloud-native environment. You will also leverage AI-assisted engineering to accelerate policy generation, network analysis, and security automation. This position is ideal for a technically driven professional who values secure-by-design systems, operational excellence, and measurable security improvements.

Accountabilities

• Lead the design, implementation, and continuous improvement of network segmentation across Kubernetes clusters, establishing default-deny policies and explicitly authorized communication paths between workloads.
• Develop and deploy identity-aware, mutually authenticated, encrypted service-to-service communication using mutual TLS (mTLS) and appropriate service identity mechanisms.
• Maintain a continuously updated inventory and map of network connectivity, including AWS VPCs, peerings, tunnels, cross-account connections, and public-facing endpoints.
• Implement and enforce network security boundaries for production infrastructure and cardholder data environments, ensuring appropriate segmentation, exposure reviews, and regular security testing.
• Collaborate with IT teams to evaluate and implement Zero Trust Network Access (ZTNA) solutions and identity-aware access controls for engineers and operators accessing production systems.
• Build and maintain network telemetry pipelines that capture east-west and north-south traffic, provide actionable visibility into communicating workloads, and integrate relevant data with SIEM platforms.
• Establish security controls for Kubernetes workload admission, including pod security, image provenance, and network policies, while managing firewall rules and cloud security configurations through infrastructure as code.
• Develop automated mechanisms to detect configuration drift, enforce approved changes through CI/CD pipelines, and remediate unauthorized modifications.
• Create rapid containment capabilities to isolate workloads or network segments when suspicious activity or lateral movement is detected, and contribute to incident investigation and response.
• Participate in threat modeling, architecture reviews, and security design discussions for changes affecting network traffic, connectivity, or access controls.
• Contribute to the on-call rotation for network security controls and continuously improve the reliability, effectiveness, and maintainability of the systems under your ownership.
• Develop and improve AI-assisted engineering workflows for network flow analysis, policy generation, configuration reviews, and security automation.

Requirements:

• At least 6 years of experience in security, network, platform, or infrastructure engineering, including hands-on ownership of network controls in cloud-based production environments.
• Strong practical knowledge of Kubernetes networking, including Container Network Interfaces (CNIs), NetworkPolicy semantics, DNS, ingress and egress traffic, and the ability to roll out segmentation safely without service interruptions.
• Extensive experience with AWS networking services and concepts, including VPCs, subnets, security groups, VPC peering, Transit Gateway, PrivateLink, load balancers, and VPC Flow Logs.
• Hands-on experience implementing mTLS and service-to-service authentication through service meshes, proxies, or CNI-level encryption.
• Proficiency in infrastructure as code, particularly Terraform and Helm or equivalent tools, with experience managing changes through Git, merge requests, and CI/CD pipelines across multiple repositories.
• Strong programming and scripting skills in Go, Python, or Bash, with the abil…