Senior Network & Security Engineer

We are seeking a Senior Network & Security Engineer with at least five years of professional experience in enterprise networking, cybersecurity, and infrastructure security. The ideal candidate will be responsible for designing, implementing, and securing complex network and infrastructure environments that support enterprise applications, AI/ML workloads, Kubernetes clusters, on-premises infrastructure, and cloud platforms. This role requires a strong technical background and the ability to collaborate with cross-functional teams to ensure secure and reliable connectivity across hybrid environments.

Key Responsibilities

Design, implement, and maintain secure enterprise network architectures that support business-critical applications and workloads. Configure and manage firewalls, VPNs, routers, switches, load balancers, and other network security controls to protect the infrastructure. Establish secure connectivity between on-premises data centers, cloud environments, and Kubernetes clusters, ensuring seamless and protected communication.

Support the secure deployment of AI/ML platforms and applications across both on-premises and cloud environments. Define network segmentation and security zones for applications, databases, AI/ML workloads, and management infrastructure to minimize attack surfaces. Implement and manage network access controls, firewall policies, VPNs, and secure remote access solutions.

Secure communication channels between frontend, backend, APIs, databases, AI/ML services, and external systems by managing TLS/SSL certificates, encryption, secrets, and secure communication protocols. Monitor network traffic, security events, and infrastructure health to detect and respond to incidents promptly. Conduct security assessments to identify vulnerabilities and configuration weaknesses, supporting remediation and security hardening efforts.

Implement Identity and Access Management (IAM) and Role-Based Access Control (RBAC) frameworks to enforce least-privilege access. Collaborate with DevOps and MLOps teams to integrate security practices into CI/CD and deployment pipelines. Review infrastructure and application architectures from a security and network perspective, establishing security controls for Kubernetes clusters and containerized workloads.

Maintain comprehensive network and security documentation, diagrams, configurations, and operational procedures. Participate in incident response, root-cause analysis, and security remediation activities to strengthen the organization’s security posture.

Kubernetes & AI/ML Security

Secure on-premises and cloud-based Kubernetes environments by implementing Kubernetes RBAC, network policies, secrets management, and workload isolation. Ensure secure communication between Kubernetes services and external enterprise systems. Support the secure deployment of ML models, inference services, large language models (LLMs), retrieval-augmented generation (RAG) applications, and AI agents.

Protect AI/ML APIs and external model-provider integrations by implementing appropriate access controls for model endpoints, data sources, vector databases, and AI services. Assess security risks related to AI/ML workloads, including data exposure, unauthorized access, insecure APIs, and secrets leakage. Collaborate with MLOps teams to establish secure model deployment and serving environments.

Cloud & Hybrid Security

Demonstrated experience securing at least one major cloud platform such as AWS, Microsoft Azure, or Google Cloud Platform (GCP). Responsibilities include designing secure connectivity between cloud and on-premises environments, configuring VPCs/VNets, subnets, routing, security groups, firewalls, and private endpoints.

Implement cloud IAM with least-privilege access principles and secure cloud Kubernetes environments such as AKS, EKS, or GKE. Support hybrid and multi-environment architectures while implementing cloud security monitoring and logging solutions.

Required Qualifications

- Minimum of 5 years of professional experience in Network and Security Engineering.
- Strong expertise in enterprise network architecture and security.
- In-depth knowledge of TCP/IP, DNS, DHCP, HTTP/HTTPS, TLS, VPN, routing, switching, and load balancing.
- Hands-on experience with enterprise firewalls and network security appliances.
- Proficiency in network segmentation, VLANs, routing, and access control.
- Experience with IAM, RBAC, authentication, authorization, and privileged access management.
- Solid understanding of cybersecurity principles and best practices.
- Experience securing Linux and Windows environments.
- Familiarity with Kubernetes security is highly desirable.
- Experience with cloud networking and security.
- Skilled in security monitoring, logging, and incident response.
- Knowledge of Git and infrastructure/configuration management practices.
- Strong troubleshooting and analytical skills.

Preferred Qualifications

Experience with Kubernetes and Docker is preferred, enhancing the ability to secure containerized workloads and orchestrated environments effectively.

This role offers the opportunity to work on cutting-edge technologies in a dynamic environment, supporting enterprise-scale AI/ML and cloud initiatives with a strong focus on security and network integrity.