Network Security Engineer

Kargo is hiring a Network Security Engineer to secure its cloud, on-premise, and edge/IoT environments. The role covers network security architecture, security operations and incident response, vulnerability management, infrastructure security, compliance, and security enablement.

Responsibilities:

• Design and implement secure network architectures across cloud, on-premise, and edge/IoT environments
• Configure and maintain firewalls, VPNs, network segmentation, NAC, and secure remote access solutions
• Evaluate and deploy new security technologies and controls
• Monitor network activity and security alerts
• Investigate suspicious activity, security events, and potential breaches
• Lead containment, remediation, and post-incident reviews
• Oversee vulnerability assessments, penetration testing, and security reviews
• Prioritize and remediate identified risks and security gaps
• Maintain security hardening standards and best practices
• Secure cloud infrastructure, network connectivity, and identity/access controls
• Partner with Infrastructure and Engineering teams to embed security into deployments and operations
• Support secure scaling of systems, services, and environments
• Implement zero-touch provisioning and secure identity management for edge hardware to ensure fleet integrity
• Architect secure, low-latency remote access and mesh VPN solutions for intra-fleet communication, field support and fleet maintenance
• Work with customers for networking integration
• Support compliance initiatives (SOC 2, ISO 27001, NIST, etc.)
• Develop security policies, standards, and documentation
• Provide security guidance and training to internal teams

Requirements:

• 5+ years of experience in network security, cybersecurity engineering, or infrastructure security roles
• Strong knowledge of networking protocols and technologies including TCP/IP, DNS, DHCP, VPN, routing, and switching
• Hands-on experience with security technologies such as firewalls, endpoint protection, and vulnerability management tools
• Experience securing cloud environments such as AWS or Google Cloud Platform
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Computer Engineering, or a related technical field
• Hands-on experience with software defined mesh VPN systems like WireGuards, Tailscale, etc
• Familiarity with security frameworks and compliance standards such as SOC 2
• Strong incident response, threat detection, and security troubleshooting skills
• Relevant certifications such as CISSP, CCNP Security, Security+, GSEC, or equivalent