Senior Kubernetes Security Engineer & AI Automation Lead

Axos Business Center; Manila; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

Axos Business Center seeks a Senior Kubernetes Security Engineer & AI Automation Engineer to build an AI-native security organization. You will own pod-level network microsegmentation and the ongoing security posture of Kubernetes clusters across cloud and on‑prem environments.

You will design least-privilege communication, develop AI agents to automate routine containment tasks, and drive segmentation and runtime protection while meeting regulatory expectations.

Qualifications

• 3+ years focused on Kubernetes security in a production enterprise environment.
• Experience with Kubernetes NetworkPolicies and policy engines (Calico, Cilium, Istio, Isovalent, Cisco Secure Workload).
• Proficiency with cloud-native platforms (AWS EKS, Azure AKS, GCP GKE).
• Experience with IaC and CI/CD (Terraform, Helm, Kustomize).
• Strong analytical and troubleshooting skills in complex network/security environments.

Responsibilities

• Own pod-level network microsegmentation across Kubernetes environments.
• Define and enforce Kubernetes NetworkPolicies and service mesh or CNI policies.
• Map workload communication flows and validate segmentation in audit mode.
• Monitor and optimize segmentation policies balancing security and performance.
• Define metadata taxonomies aligning workloads with ownership and regulatory scope.
• Design mTLS/workload identity patterns for on-prem and cloud environments.
• Lead security automation projects and mentor engineers.
• Build AI agents to automate routine security workflows.

Skills

Kubernetes security

NetworkPolicies

Zero-trust concepts

Go/Python scripting

Cloud platforms

Tools

Calico

Cilium

Istio

Kyverno/OPA Gatekeeper

Terraform

Kustomize

Falco

Trivy

Job description

Axos Business Center seeks a Senior Kubernetes Security Engineer & AI Automation Engineer to build an AI-native security organization. You will own pod-level network microsegmentation and the ongoing security posture of Kubernetes clusters across cloud and on‑prem environments.

You will design least-privilege communication, develop AI agents to automate routine containment tasks, and drive segmentation and runtime protection while meeting regulatory expectations.