Tkxel

Senior Network & Security Engineer

Tkxel Punjab, Pakistan

IT Services and IT Consulting · 501-1,000 employees

Oct 14
security Senior (5-10 yrs) Full-time Pakistan
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

The engineer will design, implement, and maintain secure enterprise network architectures across on-premises, cloud, and Kubernetes environments. They are also responsible for managing security controls, monitoring network traffic, and supporting the secure deployment of AI/ML workloads.

What they look for

Network architecture Cybersecurity Firewalls VPN Kubernetes Cloud security IAM RBAC Linux Windows TCP/IP Load balancing Incident response Infrastructure security AI/ML security

Requirements

Candidates must have at least 5 years of professional experience in network and security engineering with strong knowledge of TCP/IP, firewalls, and cloud platforms. Proficiency in Kubernetes security and identity management is highly desirable for this role.

Full description

Senior Network & Security Engineer

Senior Network & Security Engineer with a minimum of 5 years of professional experience in enterprise networking, cybersecurity, and infrastructure security. Will be responsible for designing, implementing, and securing network and infrastructure environments supporting enterprise applications, AI/ML workloads, Kubernetes, on-premises infrastructure, and cloud platforms.

Key Responsibilities

  • Design, implement, and maintain secure enterprise network architectures.
  • Configure and manage firewalls, VPNs, routers, switches, load balancers, and network security controls.
  • Design secure connectivity between on-premises data centers, cloud environments, and Kubernetes clusters.
  • Support secure deployment of AI/ML platforms and applications across on-premises and cloud environments.
  • Define network segmentation and security zones for applications, databases, AI/ML workloads, and management infrastructure.
  • Implement and manage network access controls, firewall policies, VPNs, and secure remote access.
  • Secure communication between frontend, backend, APIs, databases, AI/ML services, and external systems.
  • Implement and manage TLS/SSL certificates, encryption, secrets, and secure communication protocols.
  • Monitor network traffic, securityevents, and infrastructure health.
  • Investigate and troubleshoot network and security incidents.
  • Perform security assessments and identify vulnerabilities and configuration weaknesses.
  • Support vulnerability management, remediation, and security hardening activities.
  • Implement appropriate Identity and Access Management (IAM) and Role-Based Access Control (RBAC).
  • Work with DevOps and MLOps teams to integrate security into CI/CD and deployment pipelines.
  • Review infrastructure and application architectures from a security and network perspective.
  • Establish security controls for Kubernetes clusters and containerized workloads.
  • Support security requirements for AI/ML models, APIs, data pipelines, and AI services.
  • Maintain network and security documentation, diagrams, configurations, and operational procedures.
  • Participate in incident response, root-cause analysis, and security remediation activities.

Kubernetes & AI/ML Security

  • Secure on-premises and cloud Kubernetes environments.
  • Implement Kubernetes RBAC, Network Policies, secrets management, and workload isolation.
  • Secure communication between Kubernetes services and external enterprise systems.
  • Support secure deployment of ML models, inference services, LLMs, RAG applications, and AI agents.
  • Secure AI/ML APIs and external model-provider integrations.
  • Implement appropriate access controls for model endpoints, data sources, vector databases, and AI services.
  • Assess security risks associated with AI/ML workloads, including data exposure, unauthorized access, insecure APIs, and secrets leakage.
  • Work with MLOps teams to establish secure model deployment and serving environments.

Cloud & Hybrid Security

Experience securing at least one major cloud platform:

  • AWS
  • Microsoft Azure
  • Google Cloud Platform (GCP)

Responsibilities include:

  • Design secure connectivity between cloud and on-premises environments.
  • Configure VPC/VNet, subnets, routing, security groups, firewalls, and private endpoints.
  • Implement cloud IAM and least-privilege access.
  • Secure cloud Kubernetes environments such as AKS, EKS, or GKE.
  • Support hybrid and multi-environment architectures.
  • Implement cloud security monitoring and logging.

Required Skills & Experience

  • 5+ years of professional Network and Security Engineering experience.
  • Strong experience with enterprise network architecture and security.
  • Strong understanding of TCP/IP, DNS, DHCP, HTTP/HTTPS, TLS, VPN, routing, switching, and load balancing.
  • Hands-on experience with enterprise firewalls and network security appliances.
  • Experience with network segmentation, VLANs, routing, and access control.
  • Experience with IAM, RBAC, authentication, authorization, and privileged access.
  • Strong understanding of cybersecurity principles and security best practices.
  • Experience securing Linux and Windows environments.
  • Experience with Kubernetes security is highly desirable.
  • Experience with cloud networking and security.
  • Experience with security monitoring, logging, and incident response.
  • Experience with Git and infrastructure/configuration management practices.
  • Strong troubleshooting and analytical skills.

Requirements

Preferred Technologies

Experience with some of the following is preferred:

  • Kubernetes
  • Docker
  • Terraform
  • Azure / AWS / GCP
  • Azure Firewall / AWS WAF / Security Groups / NSGs
  • NGINX
  • HAProxy
  • VPN technologies
  • DNS and network management tools
  • Prometheus / Grafana
  • ELK / OpenSearch
  • SIEM platforms such as Microsoft Sentinel, Splunk, or similar
  • Vulnerability management tools
  • Network monitoring and packet-analysis tools such as Wireshark

Security & Compliance

  • Implement security controls aligned with organizational security policies and

industry standards.

  • Conduct security reviews of infrastructure, network architecture, and deployment

environments.

  • Support vulnerability assessments and remediation activities.
  • Implement secure configuration baselines and infrastructure hardening.
  • Ensure appropriate logging and audit trails are available.
  • Support incident detection, investigation, containment, and remediation.
  • Experience with frameworks such as ISO 27001, NIST, CIS Controls, or similar is

preferred.Collaboration

  • Work closely with DevOps, MLOps, AI/ML Engineers, Data Engineers, Backend

Developers, Frontend Developers, QA, and Business Analysts.

  • Collaborate with infrastructure and security stakeholders to define secure

deployment architectures.

  • Work with DevOps/MLOps teams to ensure network and security requirements are

addressed before production deployment.

  • Participate in Agile ceremonies, sprint planning, backlog refinement, daily

stand-ups, and retrospectives where applicable.

  • Track network and security activities, incidents, risks, and deliverables using Jira.
  • Provide technical guidance on network architecture, infrastructure security, and

AI/ML deployment security.

Benefits

Ideal Candidate

A senior Network & Security Engineer who can secure modern enterprise environments across on-premises infrastructure, Kubernetes, cloud platfo

Similar roles