Network Fabric & Security Infrastructure Engineer

About the role

The Network Fabric & Security Infrastructure Engineer will design, implement and maintain a secure, multi‑tier VLAN architecture and associated security services for our data centre environment. You will manage the private Certificate Authority, enforce mutual TLS on remote access, and ensure rapid revocation of staff sessions.

Key responsibilities

• Implement and maintain a three‑tier VLAN isolation architecture (tenant compute, management, air‑gapped sovereign data vault).
• Operate the private Certificate Authority, generating, signing and distributing X.509 client certificates per tenant.
• Configure and maintain mTLS validation on all inbound xterm.js SSH terminal connections.
• Write and maintain iptables/nftables packet‑filtering rules to block cross‑slot scanning and lateral movement.
• Maintain staff access revocation infrastructure, propagating session invalidation within 60 seconds of a revocation event.
• Monitor network infrastructure for anomalous traffic and respond to security incidents within defined SLAs.

Required profile

• Minimum three years of relevant experience.
• At least a bachelor’s degree in a related field.

Required skills

• VLAN architecture design and implementation.
• Private Certificate Authority management.
• X.509 client certificate generation and signing.
• Mutual TLS (mTLS) configuration.
• iptables and nftables packet‑filtering.
• Network traffic monitoring and anomaly detection.
• Security incident response within SLA.