Network Security Engineer – Cloud, IoT & Edge (Remote)

Kargo; San Francisco (CA); Remote; USD 200,000 - 250,000; Full time

Job summary

Kargo is seeking a Senior Network Security Engineer to join in San Francisco or work remotely from the East Coast. You will design secure architectures across cloud, on-prem, and edge/IoT, and lead response to incidents and breaches.

You will drive vulnerability management, enforce identity and access controls, and collaborate with Infra and Engineering to embed security into deployments and scale securely across fleets and services.

Qualifications

• 5+ years of experience in network security or infrastructure security.
• Strong knowledge of TCP/IP, DNS, DHCP, VPN, routing, and switching.
• Hands-on experience with firewalls, endpoint protection, and vulnerability tools.
• Experience securing cloud environments such as AWS or GCP.

Responsibilities

• Design and implement secure network architectures across cloud, on-premise, and edge/IoT environments.
• Configure and maintain firewalls, VPNs, network segmentation, NAC, and secure remote access solutions.
• Evaluate and deploy new security technologies and controls.
• Monitor network activity and security alerts.
• Investigate suspicious activity, security events, and potential breaches.
• Lead containment, remediation, and post-incident reviews.
• Oversee vulnerability assessments, penetration testing, and security reviews.
• Prioritize and remediate identified risks and security gaps.
• Maintain security hardening standards and best practices.
• Secure cloud infrastructure, network connectivity, and identity/access controls.
• Partner with Infrastructure and Engineering teams to embed security into deployments and operations.
• Support secure scaling of systems, services, and environments.
• IoT/Edge Networking/Security: zero-touch provisioning and secure identity management.
• Architect secure, low-latency remote access and mesh VPN solutions for intra-fleet communication.
• Work with customers for networking integration.
• Governance, Compliance & Security Enablement: SOC 2, ISO 27001, NIST; policies and training.

Skills

Network security

Cybersecurity engineering

Cloud security

Incident response

Secure networking protocols

Education

Bachelor's degree in Computer Science or related field

Tools

Firewalls

Endpoint protection

Vulnerability management tools

WireGuard / Tailscale

AWS/GCP security

Job description

Kargo is seeking a Senior Network Security Engineer to join in San Francisco or work remotely from the East Coast. You will design secure architectures across cloud, on-prem, and edge/IoT, and lead response to incidents and breaches.

You will drive vulnerability management, enforce identity and access controls, and collaborate with Infra and Engineering to embed security into deployments and scale securely across fleets and services.