Kubernetes & Security Specialist (Cilium & Service-to-Service Security)
Summary
Hardens service-to-service communication in large-scale production Kubernetes clusters for a client's AI-powered observability platform: designs Cilium/eBPF zero-trust network policies, hardens EKS clusters, and integrates security gates into CI/CD. Core stack: Kubernetes, Cilium, AWS (EKS, IAM, KMS), Terraform.
Wynagrodzenie
B2B: 180 – 250 PLN / godz. netto
Requirements description
Strong track record in K8s security, RBAC, network policies, and cluster hardening.
Deep experience with Cilium, Calico, Tigera, or Service Mesh technologies (Istio/eBPF).
Hands-on experience with AWS (EKS, IAM/IRSA, KMS, VPC) and Terraform.
Familiarity with OIDC/SSO, secrets management, image scanning, and compliance controls.
Willingness to participate in pre-scheduled evening alignment calls (17:00–21:00 CET) with US teams
Your responsibilities
Design, implement, and maintain service-to-service security policies within production Kubernetes clusters using Cilium (or similar eBPF/CNI solutions).
Enforce zero-trust network policies, identity-based access control, and TLS/mTLS encryption across microservices.
Hardened EKS/Kubernetes cluster configurations, container security standards, and vulnerability management.
Partner with client security, platform, and architecture teams to integrate security gates into CI/CD pipelines.
Troubleshoot complex networking, CNI, and traffic isolation issues in regulated enterprise environments.
Recruitment stages
Rozmowa z HR
Rozmowa techniczna
45-60 min.
Spotkanie z klientem
45 min.
Offer description
Hi there! If you’re seeking a high-impact role within an ambitious and fast-growing software house, you might have just found your perfect match!
Our client operates a high-scale, AI-powered Intelligent Observability Platform serving complex, enterprise digital environments.
We are hiring a Kubernetes Security & Networking Specialist to harden and secure service-to-service communication across large-scale Kubernetes clusters. You will focus on cloud-native network security, network policies, identity isolation, and eBPF-based tooling (Cilium) to safeguard multi-tenant data pipelines.