Senior Security Engineer – Network & Zero Trust

This is a fully remote position, open to applicants in Argentina.

📋 Description

• Take responsibility for east-west segmentation across Kubernetes clusters and ensure default-deny, identity-bound network paths are maintained.

• Design and implement mutually authenticated, encrypted service-to-service connections utilizing mTLS.

• Keep an up-to-date map of VPC peerings, tunnels, cross-account links, and public entry points that is continuously reconciled.

• Manage the segmentation of production and the cardholder-data environment, which includes CDE and high-trust-tier boundaries.

• Collaborate with IT to assess and provide per-application private access/ZTNA.

• Oversee network telemetry and direct east-west and north-south flow logs to the SIEM.

• Handle cluster admission control, infrastructure-as-code network controls, and automated drift detection and remediation.

• Develop containment capabilities and engage in incident response related to network controls.

• Participate in threat modeling, design reviews, and the on-call rotation.

• Draft policies, tooling, and rollout automation; report to the Director of Information Security while collaborating with security platform, detection and response, platform, IAM, and other engineering teams.

• Utilize and create AI-assisted agentic workflows for flow analysis, policy generation, and drift review.

⛳️ Requirements

• Over 6 years of experience in security, network, platform, or infrastructure engineering, with direct ownership of network controls in cloud production settings.

• Extensive practical knowledge of Kubernetes networking: CNI, NetworkPolicy semantics, DNS, ingress/egress, along with experience deploying segmentation on live clusters without causing outages.

• Strong expertise in AWS networking: VPCs, subnets, security groups, peering and Transit Gateway, PrivateLink, load balancers, and flow logs.

• Hands-on experience with mTLS and service-to-service authentication.

• Proficiency in infrastructure as code using Terraform and Helm or equivalent tools, through merge requests and CI.

• Capability to write code in Go, Python, or Bash for tooling and automation purposes.

• Skill in conducting investigations using packet captures, flow logs, and system-level data.

• Familiarity with PCI DSS network requirements.

• Proven experience in AI-forward engineering utilizing AI tools such as Claude Code, Codex, Cursor, or custom LLM integrations.

• Preferred: Knowledge of Cilium/eBPF, Hubble or similar flow observability, fleet-scale mTLS, certificate lifecycle management, SPIFFE/SPIRE, AI-assisted workflows, ZTNA, policy-as-code, admission control, network detection, IDS/IPS, SOC 2, FFIEC-style examination expectations, and experience in regulated environments.

🏝️ Benefits

• Competitive gross salary ranging from $5,000 to $9,500 USD per month, depending on experience level.

• A vibrant culture that includes musicians, yogis, cyclists, chefs, golfers, dog lovers, and rock climbers.

• Flexibility with remote work arrangements.