Senior Kubernetes Security & AI Automation Engineer

Axos Bank; Manila; Sur place; PHP 1 200 000 - 2 400 000; Plein temps

Résumé du poste

Axos is seeking a Senior Kubernetes Security Engineer & AI Automation Engineer to build an AI-native security org. You will own pod-level microsegmentation and ongoing cluster security across cloud and on-prem environments while developing AI agents that automate routine container security tasks at machine speed.

You will design least-privilege communication, enforce policies, and ensure segmentation and runtime protection meet regulatory scrutiny in banking environments.

Qualifications

• 3+ years focused on Kubernetes security in a production enterprise environment.
• Strong hands-on experience with Kubernetes NetworkPolicies and with tools such as Calico, Cilium, Istio, Isovalent, or Cisco Secure Workload.
• Proven track record designing and maintaining microsegmentation strategies at scale in Kubernetes.

Responsabilités

• Own the design, implementation, and maintenance of pod-level network microsegmentation across environments.
• Define and enforce Kubernetes NetworkPolicies and service mesh or CNI-level policies (Calico, Istio, etc.), including default-deny baselines and isolation.
• Model workload communication flows to build segmentation policy from observed behavior and validate in audit mode.
• Harden Kubernetes clusters end to end with RBAC, admission controllers, and CIS benchmarks.
• Deploy and tune runtime detection tools (Falco, Sysdig, Trivy) for security monitoring.
• Collaborate with SOC/IR to build detection rules, playbooks, and investigation workflows.

Connaissances

Kubernetes security

Policy automation

AI automation

Cloud platforms

Python scripting

Terraform

CI/CD security

Zero-trust networking

Outils

Calico

Cilium

Istio

Isovalent

Cisco Secure Workload

Falco

Sysdig

Trivy

Description du poste

Axos is seeking a Senior Kubernetes Security Engineer & AI Automation Engineer to build an AI-native security org. You will own pod-level microsegmentation and ongoing cluster security across cloud and on-prem environments while developing AI agents that automate routine container security tasks at machine speed.

You will design least-privilege communication, enforce policies, and ensure segmentation and runtime protection meet regulatory scrutiny in banking environments.