Kubernetes Security & Networking Lead (Cilium)

Acaisoft; Kraków, Wrocław, Poznań; On-site; PLN 180,000 - 280,000; Full time

Job summary

Acaisoft is seeking a Kubernetes Security & Networking Specialist to harden and secure service-to-service communication across large-scale Kubernetes clusters. You will focus on cloud-native network security, network policies, identity isolation, and eBPF-based tooling (Cilium) to safeguard multi-tenant data pipelines.

You will design, implement, and maintain security policies within production clusters, enforcing TLS/mTLS and zero-trust models, and work closely with security, platform, and

Qualifications

• Experience securing Kubernetes environments and enforcing policy.
• Familiarity with service mesh and CNI security tooling.
• Hands-on experience with cloud platforms and IaC for security.
• Proactive in vulnerability management and compliance controls.

Responsibilities

• Design, implement, and maintain service-to-service security policies in production clusters via Cilium or similar tooling.
• Enforce zero-trust network policies, identity-based access control, and TLS/mTLS across microservices.
• Harden EKS/Kubernetes configurations, container security standards, and vulnerability management.
• Collaborate with client security, platform, and architecture teams to embed security gates into CI/CD pipelines.
• Troubleshoot complex networking, CNI, and traffic isolation issues in regulated environments.

Skills

Kubernetes security

RBAC & network policy

Cluster hardening

Zero-trust security

CI/CD security gates

Tools

Kubernetes

Cilium

Calico

Istio

Terraform

AWS EKS

OIDC/SSO

VPC

Job description

Acaisoft is seeking a Kubernetes Security & Networking Specialist to harden and secure service-to-service communication across large-scale Kubernetes clusters. You will focus on cloud-native network security, network policies, identity isolation, and eBPF-based tooling (Cilium) to safeguard multi-tenant data pipelines.

You will design, implement, and maintain security policies within production clusters, enforcing TLS/mTLS and zero-trust models, and work closely with security, platform, and