Platform Network Security Engineer

Hampton North; United States; On-site; USD 190,000 - 210,000; Full time

Job summary

Hampton North seeks an experienced security leader to own network security in a cloud-native environment. You will protect Layer 7 and above with API security, zero trust, and infrastructure-as-code across AWS and GCP, driving the move from legacy appliances to modern segmentation and ZTNA.

This 100% remote role in the United States offers a base salary of $190,000–$210,000 plus a 20% annual bonus, and opportunities to mentor teams while codifying security as policy-as-code with Terraform.

Qualifications

• 7+ years in network and cloud security; SaaS/FinTech/cloud-native background preferred.
• Hands-on AWS experience; good knowledge of GCP; Azure a plus.

Responsibilities

• Design and operate cloud-native network security across AWS and GCP, including VPC architecture, segmentation, and secure connectivity.
• Build Layer 7 defenses using WAF, bot management, API gateway and API security, and reverse proxy.
• Lead the transition to ZTNA and modern microsegmentation with Zscaler.
• Secure Kubernetes networking end to end, including service mesh, network policy, and workload-to-workload controls.
• Codify security infrastructure as policy-as-code in Terraform.
• Stand up and tune network detection and response, IPS, and real-time monitoring.
• Automate validation and recurring operations with Python, PowerShell, and Shell.
• Own initiatives from design through delivery and serve as a technical mentor across teams.

Skills

Cloud security

Network security

Kubernetes security

ZTNA

API security

Scripting (Python)

PowerShell

Shell

NIST/CIS/MITRE ATT&CK

Education

Bachelor's degree or equivalent hands-on experience

Tools

Cloudflare

WAF

API gateway

Zscaler

Terraform

Job description

You will own network security for a cloud-native environment where the interesting work lives at Layer 7 and above. This is a software-company security role built around zero trust, API security, and infrastructure as code, protecting workloads across AWS and GCP. You will lead the move off legacy appliances toward modern segmentation and ZTNA, and secure Kubernetes networking the way a platform engineer would.

Compensation: $190,000 to $210,000 base plus a 20% annual cash bonus.

Logistics: 100% remote within the US. Full time.

Here's what you'll be doing:

• Design and operate cloud-native network security across AWS and GCP, including VPC architecture, segmentation, and secure connectivity
• Build Layer 7 defenses using WAF, bot management, API gateway and API security, and reverse proxy
• Lead the transition to ZTNA and modern microsegmentation with Zscaler
• Secure Kubernetes networking end to end, including service mesh, network policy, and workload to workload controls
• Codify security infrastructure as policy-as-code in Terraform
• Stand up and tune network detection and response, IPS, and real-time monitoring
• Automate validation and recurring operations with Python, PowerShell, and Shell
• Own initiatives from design through delivery and serve as a technical mentor across teams

And what you need to have:

• 7+ years in network and cloud security, ideally from a SaaS, FinTech, or cloud-native software environment
• Hands-on depth in AWS, working knowledge of GCP, Azure a plus
• Layer 7 security experience: Cloudflare, WAF, bot protection, API gateway and API security
• Zscaler or comparable ZTNA and modern segmentation
• Kubernetes and service mesh security
• Terraform and a policy-as-code approach to infrastructure
• Scripting in Python, PowerShell, and Shell
• Working fluency with NIST, CIS, and MITRE ATT&CK
• Bachelor's in a related field or equivalent hands-on experience