Senior Cloud-Native Network Security Engineer (Remote)

Hampton North; United States; On-site; USD 190,000 - 210,000; Full time

Job summary

Hampton North is seeking an experienced security leader to own cloud-native network security for a SaaS cloud environment across AWS and GCP. The role emphasizes Layer 7 protections, API security, and zero trust architecture in a fully remote US setup.

You will design, implement, and mentor teams while moving from legacy appliances to modern segmentation, securing Kubernetes networking, and codifying controls with Terraform.

Qualifications

• 7+ years in network and cloud security in SaaS/FinTech/cloud-native environments.
• Hands-on AWS experience; working knowledge of GCP; Azure a plus.
• Layer 7 security: Cloudflare, WAF, bot protection, API gateway and API security.
• ZTNA and modern segmentation experience with Zscaler.
• Kubernetes and service mesh security experience.
• Policy-as-code with Terraform is expected.
• Scripting in Python, PowerShell, and Shell.

Responsibilities

• Design and operate cloud-native network security across AWS and GCP, including VPC architecture, segmentation, and secure connectivity
• Build Layer 7 defenses using WAF, bot management, API gateway and API security, and reverse proxy
• Lead the transition to ZTNA and modern microsegmentation with Zscaler
• Secure Kubernetes networking end to end, including service mesh, network policy, and workload to workload controls
• Codify security infrastructure as policy-as-code in Terraform
• Stand up and tune network detection and response, IPS, and real-time monitoring
• Automate validation and recurring operations with Python, PowerShell, and Shell
• Own initiatives from design through delivery and serve as a technical mentor across teams

Skills

Cloud security

Network security

AWS

GCP

Kubernetes security

ZTNA

Automation

Education

Bachelor's degree or equivalent hands-on experience

Tools

Terraform

Job description

Hampton North is seeking an experienced security leader to own cloud-native network security for a SaaS cloud environment across AWS and GCP. The role emphasizes Layer 7 protections, API security, and zero trust architecture in a fully remote US setup.

You will design, implement, and mentor teams while moving from legacy appliances to modern segmentation, securing Kubernetes networking, and codifying controls with Terraform.