Kubernetes & Security Specialist (Cilium & Service-to-Service Security)

Acaisoft; Kraków, Wrocław, Poznań; On-site; PLN 180,000 - 280,000; Full time

Job summary

Acaisoft is seeking a Kubernetes Security & Networking Specialist to harden and secure service-to-service communication across large-scale Kubernetes clusters. You will focus on cloud-native network security, network policies, identity isolation, and eBPF-based tooling (Cilium) to safeguard multi-tenant data pipelines.

You will design, implement, and maintain security policies within production clusters, enforcing TLS/mTLS and zero-trust models, and work closely with security, platform, and

Qualifications

• Experience securing Kubernetes environments and enforcing policy.
• Familiarity with service mesh and CNI security tooling.
• Hands-on experience with cloud platforms and IaC for security.
• Proactive in vulnerability management and compliance controls.

Responsibilities

• Design, implement, and maintain service-to-service security policies in production clusters via Cilium or similar tooling.
• Enforce zero-trust network policies, identity-based access control, and TLS/mTLS across microservices.
• Harden EKS/Kubernetes configurations, container security standards, and vulnerability management.
• Collaborate with client security, platform, and architecture teams to embed security gates into CI/CD pipelines.
• Troubleshoot complex networking, CNI, and traffic isolation issues in regulated environments.

Skills

Kubernetes security

RBAC & network policy

Cluster hardening

Zero-trust security

CI/CD security gates

Tools

Kubernetes

Cilium

Calico

Istio

Terraform

AWS EKS

OIDC/SSO

VPC

Job description

Requirements description

• Strong track record in K8s security, RBAC, network policies, and cluster hardening.
• Deep experience with Cilium, Calico, Tigera, or Service Mesh technologies (Istio/eBPF).
• Hands-on experience with AWS (EKS, IAM/IRSA, KMS, VPC) and Terraform.
• Familiarity with OIDC/SSO, secrets management, image scanning, and compliance controls.
• Willingness to participate in pre-scheduled evening alignment calls (17:00–21:00 CET) with US teams

Your responsibilities

• Design, implement, and maintain service-to-service security policies within production Kubernetes clusters using Cilium (or similar eBPF/CNI solutions).
• Enforce zero-trust network policies, identity-based access control, and TLS/mTLS encryption across microservices.
• Hardened EKS/Kubernetes cluster configurations, container security standards, and vulnerability management.
• Partner with client security, platform, and architecture teams to integrate security gates into CI/CD pipelines.
• Troubleshoot complex networking, CNI, and traffic isolation issues in regulated enterprise environments.

Recruitment stages

• Rozmowa z HR
• Rozmowa techniczna
  45-60 min.
• Spotkanie z klientem
  45 min.

Offer description

Hi there! If you’re seeking a high-impact role within an ambitious and fast-growing software house, you might have just found your perfect match!

Our client operates a high-scale, AI-powered Intelligent Observability Platform serving complex, enterprise digital environments. We are hiring a Kubernetes Security & Networking Specialist to harden and secure service-to-service communication across large-scale Kubernetes clusters. You will focus on cloud-native network security, network policies, identity isolation, and eBPF-based tooling (Cilium) to safeguard multi-tenant data pipelines.