Coupang Platform Security Architect responsible for designing and strengthening Kubernetes-based platform security architecture. Implement secure service mesh environments and collaborate with development teams to promote Secure-by-Design culture.
Responsibilities
Design and strengthen the security architecture across the entire Kubernetes-based platform
Build and operate authentication, authorization, and encryption frameworks within the Service Mesh environment
Establish security control systems for protecting East-West (inter-service) and North-South (external ingress) traffic
Develop and implement security strategies for the Microservices Architecture environment
Enhance the security posture of container and cloud-native workloads and define operational standards
Build network security and inter-service trust models in large-scale distributed system environments
Improve platform security through automation-based security policy design and enforcement
Build detection and response systems to protect the platform and services from machine-speed attacks and advanced threats
Drive Secure-by-Design culture adoption and establish security best practices through collaboration with development teams
Establish long-term security strategy and technical direction for cloud-native platforms
Qualification
Deep understanding of authentication
Required
Bachelor's degree or above in Information Security, Computer Science, or a related field
Ability to communicate technical topics in English
Experience conducting security architecture reviews for application and infrastructure environments
Experience performing code-level security vulnerability analysis and security reviews
Deep understanding of authentication, authorization, service identity, and access control models
Experience verifying security context propagation across APIs and inter-service communications throughout end-to-end application workflows
Experience in security design and operations for Kubernetes and container-based environments
Experience designing and implementing non-root or rootless container environments
Experience leveraging AI/LLM-based solutions for security automation and operational efficiency
Experience solving complex security problems through collaboration with development teams and diverse stakeholders
Preferred
Expertise in Network Segmentation and Micro-Segmentation
Experience designing and operating Layer 7 service mesh policies based on Istio or Envoy
Experience operating Kubernetes network security policies using eBPF-based CNI technologies
Experience designing network access controls using Kubernetes NetworkPolicy
Experience applying workload security standards using Pod Security Admission
Experience with Policy-as-Code-based security controls such as Kyverno and OPA (Gatekeeper)
Hands-on experience in Kubernetes platform security, cloud security, or platform engineering organizations
Experience designing or operating Zero Trust Architecture in large-scale distributed system environments