Role track: Network & Infrastructure Engineer

Role overview

Specialize in data-plane security: segmentation strategy, encryption patterns, service-to-service trust, identity-aware routing, and traffic anomaly foundations.

Core responsibilities (framework):

  • Advanced network segmentation, ingress, and egress boundaries

  • Encryption for data in transit and at rest (as it intersects the network fabric)

  • Monitor and help mitigate anomalous or denial-style traffic

  • Multi-cluster posture from the network perspective

  • Runtime workload / service identity trust integration

  • Service-to-service trust fabric (mTLS layering, certificate lifecycle)

Not owning: compliance scanning automation, supply-chain gates, or organization-wide artifact provenance (Platform, DevSecOps, Architect).

Recommended sequence

Basic

  1. 101-01 — Default Secure Behavior

  2. 101-02 — Projects & Namespaces

  3. 101-04 — SCC & Resource Guardrails

  4. 101-05 — NetworkPolicy Basics

  5. 101-08 — Etcd Encryption & Control Plane

  6. 101-09 — Audit Logging & Exec Events

  7. 101-12 — Enforce TLS on Routes

Intermediate

  1. 101-05 — NetworkPolicy Basics and 201-08 — Certificate Management & mTLS

  2. 201-06 — Audit Correlation & Anomaly Detection

  3. 201-10 — RHACM Policy Governance (DoD / NIST)

Advanced

  1. 301-03 — AdminNetworkPolicy

  2. 301-07 — Encryption Inventory

  3. 301-08 — Zero-Trust Workload Identity

Related modules

Catalogs