Role track: Network & Infrastructure Engineer

Role overview

Specialize in data-plane security: segmentation strategy, encryption patterns, service-to-service trust, identity-aware routing, and traffic anomaly foundations.

Core responsibilities (framework):

  • Advanced network segmentation, ingress, and egress boundaries

  • Encryption for data in transit and at rest (as it intersects the network fabric)

  • Monitor and help mitigate anomalous or denial-style traffic

  • Multi-cluster posture from the network perspective

  • Runtime workload / service identity trust integration

  • Service-to-service trust fabric (mTLS layering, certificate lifecycle)

Not owning: compliance scanning automation, supply-chain gates, or organization-wide artifact provenance (Platform, DevSecOps, Architect).

Recommended sequence

Basic

  1. 101-01 — Default Secure Behavior

  2. 101-02 — Projects & Namespaces

  3. 101-04 — SCC & Resource Guardrails

  4. 101-05 — NetworkPolicy Basics

  5. 101-08 — Etcd Encryption & Control Plane

  6. 101-09 — Audit Logging & Exec Events

  7. 101-12 — Enforce TLS on Routes

Skip for this role (unless cross-training): RBAC deep dive, Secrets, image provenance, compliance add-ons, and image rebuild (101-11).

Intermediate

  1. 101-05 — NetworkPolicy Basics and 201-09 — Certificate Management & mTLS

  2. 201-07 — Audit Correlation & Anomaly Detection

  3. 201-11 — Admission & Policy Enforcement

Advanced

  1. 301-03 — Multi-Tenant Zero-Trust Network

  2. 301-09 — Advanced Cryptography

  3. 301-10 — Zero-Trust Workload Identity

  4. 301-11 — Confidential Containers

Related modules

Catalogs