Kubernetes Security Engineer

Rising Tide Digital, Inc.; Taguig; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Rising Tide Digital, Inc. seeks a Kubernetes Security & AI Automation Engineer to own containerized security across cloud and on-premises Kubernetes. You will design pod-level microsegmentation, enforce zero-trust posture, and develop AI agents to automate security workflows at machine speed.

Ideal candidates have 3+ years of production Kubernetes security experience, proficiency with NetworkPolicies/CNI tools, and hands-on cloud security for EKS/AKS/GKE. PCI-DSS experience is a plus.

Qualifications

• 3+ years of Kubernetes security in a production enterprise.
• Hands-on with Kubernetes NetworkPolicies and CNI/service mesh tools.
• Experience securing AWS EKS, Azure AKS, or GCP GKE.
• Experience with container security tools (Aqua, Prisma Cloud, Sysdig, Trivy, Falco).
• Proficiency in Python (strongly preferred), Go, or Bash; IaC tools (Terraform, Helm, Kustomize).
• CKS certification and regulated financial services exposure preferred.

Responsibilities

• Take ownership of containerized infrastructure security across cloud and on-premises Kubernetes environments
• Design pod-level network microsegmentation
• Enforce zero-trust posture
• Pioneer custom AI agents to automate routine container security workflows
• Troubleshoot complex distributed network and cluster security issues

Skills

Kubernetes security

Python

Go

Bash

AI/LLM security automation

CKS certification

PCI-DSS awareness

CIS Benchmarks

Troubleshooting

IaC tooling

Tools

Aqua

Prisma Cloud

Sysdig

Trivy

Falco

Cilium

Calico

Istio

Isovalent

Cisco Secure Workload

Terraform

Helm

Kustomize

Job description

About the role

We are seeking a Kubernetes Security & AI Automation Engineer to join our cybersecurity team in supporting a leading U.S.-based digital financial institution. In this high-impact position, you will take ownership of containerized infrastructure security across cloud and on-premises Kubernetes environments. You will design pod-level network microsegmentation, enforce zero-trust posture, and pioneer custom AI agents to automate routine container security workflows at machine speed.

Key responsibilities

• Take ownership of containerized infrastructure security across cloud and on-premises Kubernetes environments

• Design pod-level network microsegmentation

• Enforce zero-trust posture

• Pioneer custom AI agents to automate routine container security workflows

• Troubleshoot complex distributed network and cluster security issues

About you

• 3+ years of dedicated experience in Kubernetes security within a production enterprise environment

• Deep hands-on experience with Kubernetes NetworkPolicies and CNI/service mesh tools (Cilium, Calico, Istio, Isovalent, or Cisco Secure Workload)

• Hands-on experience securing AWS EKS, Azure AKS, or GCP GKE

• Experience with container security tools (Aqua, Prisma Cloud, Sysdig, Trivy, Falco)

• Proficiency in Python (strongly preferred), Go, or Bash, alongside IaC tools (Terraform, Helm, Kustomize)

• Strong troubleshooting skills for complex distributed network and cluster security issues

• Hands-on experience developing or integrating AI/LLM-driven security automation (prompt engineering, AI orchestration frameworks, API automation) - preferred

• Certified Kubernetes Security Specialist (CKS) certification - preferred

• Prior experience in highly regulated financial services environments (PCI-DSS, CIS Benchmarks) - preferred

• Experience implementing Service Mesh security (mTLS, identity-based access) - preferred