TJ 17320 - SENIOR NETWORK ENGINEER (Security, Azure & Kubernetes)

Kubernetes & Cloud Networking

• Design, implement, and secure Kubernetes clusters (AKS and self-managed) .
• Configure and maintain Kubernetes networking (CNI plugins such as Calico or Cilium, ingress controllers like NGINX/Traefik, service mesh with Istio/Linkerd).
• Enforce network policies, pod security standards, and RBAC inside Kubernetes.
• Integrate Kubernetes networking with Azure VNets, NSGs, private endpoints, and load balancers .
• Automate Kubernetes infrastructure

Network Architecture & Security

• Manage and configure enterprise firewalls (Fortinet, Palo Alto, Cisco ASA/FTD, or Check Point).
• Implement zero-trust models
• Secure workloads using Firewalls, Application Gateway, WAF, DDoS Protection, and private endpoints .
• Lead threat detection, incident response, and vulnerability remediation across cloud and container platforms.

Identity, Domains & DNS

• Administer Microsoft Entra ID (Azure Active Directory) for SSO, MFA, RBAC, and conditional access.
• Manage DNS (Azure DNS, BIND, Microsoft DNS), DHCP, SSL/TLS, DNSSEC, and public domain registrations .
• Integrate Entra ID with Kubernetes workloads and role-based access policies.

Endpoint & Policy Management

• Deploy and maintain endpoint security solutions
• Create and enforce security baselines, GPOs, and organizational security policies .
• Align all configurations to ISO 27001, SOC2, POPIA, and GDPR compliance.

Operations & Monitoring

• Monitor and troubleshoot network, Kubernetes, DNS, and firewall issues
• Participate in incident response, root cause analysis, and DR testing .
• Automate operational tasks