Senior Network & Security Engineer
Tkxel Punjab, Pakistan
IT Services and IT Consulting · 501-1,000 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The engineer will design, implement, and maintain secure enterprise network architectures across on-premises, cloud, and Kubernetes environments. They are also responsible for managing security controls, monitoring network traffic, and supporting the secure deployment of AI/ML workloads.
What they look for
Requirements
Candidates must have at least 5 years of professional experience in network and security engineering with strong knowledge of TCP/IP, firewalls, and cloud platforms. Proficiency in Kubernetes security and identity management is highly desirable for this role.
Full description
Senior Network & Security Engineer
Senior Network & Security Engineer with a minimum of 5 years of professional experience in enterprise networking, cybersecurity, and infrastructure security. Will be responsible for designing, implementing, and securing network and infrastructure environments supporting enterprise applications, AI/ML workloads, Kubernetes, on-premises infrastructure, and cloud platforms.
Key Responsibilities
- Design, implement, and maintain secure enterprise network architectures.
- Configure and manage firewalls, VPNs, routers, switches, load balancers, and network security controls.
- Design secure connectivity between on-premises data centers, cloud environments, and Kubernetes clusters.
- Support secure deployment of AI/ML platforms and applications across on-premises and cloud environments.
- Define network segmentation and security zones for applications, databases, AI/ML workloads, and management infrastructure.
- Implement and manage network access controls, firewall policies, VPNs, and secure remote access.
- Secure communication between frontend, backend, APIs, databases, AI/ML services, and external systems.
- Implement and manage TLS/SSL certificates, encryption, secrets, and secure communication protocols.
- Monitor network traffic, securityevents, and infrastructure health.
- Investigate and troubleshoot network and security incidents.
- Perform security assessments and identify vulnerabilities and configuration weaknesses.
- Support vulnerability management, remediation, and security hardening activities.
- Implement appropriate Identity and Access Management (IAM) and Role-Based Access Control (RBAC).
- Work with DevOps and MLOps teams to integrate security into CI/CD and deployment pipelines.
- Review infrastructure and application architectures from a security and network perspective.
- Establish security controls for Kubernetes clusters and containerized workloads.
- Support security requirements for AI/ML models, APIs, data pipelines, and AI services.
- Maintain network and security documentation, diagrams, configurations, and operational procedures.
- Participate in incident response, root-cause analysis, and security remediation activities.
Kubernetes & AI/ML Security
- Secure on-premises and cloud Kubernetes environments.
- Implement Kubernetes RBAC, Network Policies, secrets management, and workload isolation.
- Secure communication between Kubernetes services and external enterprise systems.
- Support secure deployment of ML models, inference services, LLMs, RAG applications, and AI agents.
- Secure AI/ML APIs and external model-provider integrations.
- Implement appropriate access controls for model endpoints, data sources, vector databases, and AI services.
- Assess security risks associated with AI/ML workloads, including data exposure, unauthorized access, insecure APIs, and secrets leakage.
- Work with MLOps teams to establish secure model deployment and serving environments.
Cloud & Hybrid Security
Experience securing at least one major cloud platform:
- AWS
- Microsoft Azure
- Google Cloud Platform (GCP)
Responsibilities include:
- Design secure connectivity between cloud and on-premises environments.
- Configure VPC/VNet, subnets, routing, security groups, firewalls, and private endpoints.
- Implement cloud IAM and least-privilege access.
- Secure cloud Kubernetes environments such as AKS, EKS, or GKE.
- Support hybrid and multi-environment architectures.
- Implement cloud security monitoring and logging.
Required Skills & Experience
- 5+ years of professional Network and Security Engineering experience.
- Strong experience with enterprise network architecture and security.
- Strong understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, TLS, VPN, routing, switching, and load balancing.
- Hands-on experience with enterprise firewalls and network security appliances.
- Experience with network segmentation, VLANs, routing, and access control.
- Experience with IAM, RBAC, authentication, authorization, and privileged access.
- Strong understanding of cybersecurity principles and security best practices.
- Experience securing Linux and Windows environments.
- Experience with Kubernetes security is highly desirable.
- Experience with cloud networking and security.
- Experience with security monitoring, logging, and incident response.
- Experience with Git and infrastructure/configuration management practices.
- Strong troubleshooting and analytical skills.
Requirements
Preferred Technologies
Experience with some of the following is preferred:
- Kubernetes
- Docker
- Terraform
- Azure / AWS / GCP
- Azure Firewall / AWS WAF / Security Groups / NSGs
- NGINX
- HAProxy
- VPN technologies
- DNS and network management tools
- Prometheus / Grafana
- ELK / OpenSearch
- SIEM platforms such as Microsoft Sentinel, Splunk, or similar
- Vulnerability management tools
- Network monitoring and packet-analysis tools such as Wireshark
Security & Compliance
- Implement security controls aligned with organizational security policies and
industry standards.
- Conduct security reviews of infrastructure, network architecture, and deployment
environments.
- Support vulnerability assessments and remediation activities.
- Implement secure configuration baselines and infrastructure hardening.
- Ensure appropriate logging and audit trails are available.
- Support incident detection, investigation, containment, and remediation.
- Experience with frameworks such as ISO 27001, NIST, CIS Controls, or similar is
preferred.Collaboration
- Work closely with DevOps, MLOps, AI/ML Engineers, Data Engineers, Backend
Developers, Frontend Developers, QA, and Business Analysts.
- Collaborate with infrastructure and security stakeholders to define secure
deployment architectures.
- Work with DevOps/MLOps teams to ensure network and security requirements are
addressed before production deployment.
- Participate in Agile ceremonies, sprint planning, backlog refinement, daily
stand-ups, and retrospectives where applicable.
- Track network and security activities, incidents, risks, and deliverables using Jira.
- Provide technical guidance on network architecture, infrastructure security, and
AI/ML deployment security.
Benefits
Ideal Candidate
A senior Network & Security Engineer who can secure modern enterprise environments across on-premises infrastructure, Kubernetes, cloud platfo
Similar roles
-
Digital Forensics & Incident Response, Vice President -Cybersecurity Operations
JPMorgan Chase & Co. Singapore, Singapore, Singapore
-
Manager, GR NFRM TRM - Cybersecurity Risk Management
CIMB Group Malaysia Kuala Lumpur, Kuala Lumpur, Malaysia
-
Vice President, GR NFRM TRM - Cybersecurity Risk Management
CIMB Group Malaysia Kuala Lumpur, Kuala Lumpur, Malaysia
-
Cybersecurity Engineer II
Love's Travel Stops & Country Stores Oklahoma City, Oklahoma, United States
-
Cybersecurity Risk Specialist
CelcomDigi Subang Jaya City Council, Selangor, Malaysia
-
Cybersecurity Consultant, Network Security (2 year direct contract)
Singtel Group Singapore, Singapore