Network Fabric & Security Infrastructure Engineer

Responsibilities:

• Implement and maintain three-tier VLAN isolation architecture like VLAN 100 (tenant compute), VLAN 200 (management), and  VLAN 300 (sovereign data vault — air-gapped)
• Operate the private Certificate Authority (CA) infrastructure
• Generating, signing, and distributing X.509 client certificates per tenant
• Configure and maintain mTLS validation on all inbound xterm.js SSH terminal connections
• Write and maintain iptables/nftables packet filtering rules blocking cross-slot scanning and lateral movement
• Maintain staff access revocation infrastructure — propagating session invalidation within 60 seconds of a revocation event
• Monitor network infrastructure for anomalous traffic and respond to security incidents within defined SLAs. 

Requirements:

• A minimum of 3 years of experience.
• A minimum of a degree in a related field.