Kubernetes & Security Specialist (Cilium & Service-to-Service Security)

About the company

Hi there! If you’re seeking a high-impact role within an ambitious and fast-growing software house, you might have just found your perfect match!

Our client operates a high-scale, AI-powered Intelligent Observability Platform serving complex, enterprise digital environments.

Your tasks

We are hiring a Kubernetes Security & Networking Specialist to harden and secure service-to-service communication across large-scale Kubernetes clusters. You will focus on cloud-native network security, network policies, identity isolation, and eBPF-based tooling (Cilium) to safeguard multi-tenant data pipelines.

• Design, implement, and maintain service-to-service security policies within production Kubernetes clusters using Cilium (or similar eBPF/CNI solutions).
• Enforce zero-trust network policies, identity-based access control, and TLS/mTLS encryption across microservices.
• Hardened EKS/Kubernetes cluster configurations, container security standards, and vulnerability management.
• Partner with client security, platform, and architecture teams to integrate security gates into CI/CD pipelines.
• Troubleshoot complex networking, CNI, and traffic isolation issues in regulated enterprise environments.

Requirements

• Strong track record in K8s security, RBAC, network policies, and cluster hardening.
• Deep experience with Cilium, Calico, Tigera, or Service Mesh technologies (Istio/eBPF).
• Hands-on experience with AWS (EKS, IAM/IRSA, KMS, VPC) and Terraform.
• Familiarity with OIDC/SSO, secrets management, image scanning, and compliance controls.
• Willingness to participate in pre-scheduled evening alignment calls (17:00–21:00 CET) with US teams

Must have:

• Security
• Kubernetes
• TLS
• Microservices
• Amazon EKS
• CI/CD Pipelines
• Networking