Senior Network Security Engineer

Network Security EngineerYou will own network security for a cloud-native environment where the interesting work lives at Layer 7 and above. This is a software-company security role built around zero trust, API security, and infrastructure as code, protecting workloads across AWS and GCP. You will lead the move off legacy appliances toward modern segmentation and ZTNA, and secure Kubernetes networking the way a platform engineer would.Compensation: $190,000 to $210,000 base plus a 20% annual cash bonus.Logistics: 100% remote within the US. Full time.Here's what you'll be doing:Design and operate cloud-native network security across AWS and GCP, including VPC architecture, segmentation, and secure connectivityBuild Layer 7 defenses using WAF, bot management, API gateway and API security, and reverse proxyLead the transition to ZTNA and modern microsegmentation with ZscalerSecure Kubernetes networking end to end, including service mesh, network policy, and workload to workload controlsCodify security infrastructure as policy-as-code in TerraformStand up and tune network detection and response, IPS, and real-time monitoringAutomate validation and recurring operations with Python, PowerShell, and ShellOwn initiatives from design through delivery and serve as a technical mentor across teamsAnd what you need to have:7+ years in network and cloud security, ideally from a SaaS, FinTech, or cloud-native software environmentHands-on depth in AWS, working knowledge of GCP, Azure a plusLayer 7 security experience: Cloudflare, WAF, bot protection, API gateway and API securityZscaler or comparable ZTNA and modern segmentationKubernetes and service mesh securityTerraform and a policy-as-code approach to infrastructureScripting in Python, PowerShell, and ShellWorking fluency with NIST, CIS, and MITRE ATT&CKBachelor's in a related field or equivalent hands-on experienceNo CTC or sponsorship at this time.