Come Forge the Future of Machine Identity Security

for Operational Systems

Where: Tysons, VA (Hybrid)

Supporting: Our Head of Infrastructure

About Corsha:

At Corsha we're not just selling software; we're fundamentally reshaping how the most critical industrial and operational technology (OT) systems are secured. We're a cyber startup in the DC area, driven by a mission to bring trust, resilience, and identity to the operational systems that power our world – from factories to power grids. We're building the future of machine identity security, and we need a dynamic technical evangelist to join our front lines.

Tired of the Status Quo? Ready to Secure the Unseen? Here’s your Opportunity:

If you're an engineer who thrives on solving hard problems, isn't afraid to get your hands dirty with bare-metal and sees the immense potential of cloud-native tech like Kubernetes and Docker in unconventional environments, then read on. We move fast, we build for impact, and we need a network visionary to help us secure the machines that matter most.

Your Mission: Secure the Industrial Edge

We’re looking for a Platform Engineer to be a foundational engineer for our Machine Identity Platform (mIdP), specifically tailored for the unique and challenging landscape of OT systems. Your mission: design, implement, and defend the network infrastructure that underpins our cutting-edge solutions, with a heavy emphasis on robust Kubernetes and Docker deployments on bare-metal hardware.

This isn't just about keeping the lights on. It's about building networks that are inherently secure, highly available, and resilient against the most sophisticated threats, often in environments where traditional IT paradigms simply don't apply. You'll be bridging the gap between cutting-edge cloud-native technologies and the operational realities of factories, power plants, and critical infrastructure.

What You'll Do:

Architect and Implement OT Network Solutions: Design, deploy, and manage secure and performant network architectures for our machine IdP, specifically tailored for OT environments. This includes network segmentation, routing, switching, and firewall configurations.
Kubernetes & Docker Networking on Bare-Metal: Be the subject matter expert for networking within our Kubernetes and Docker bare-metal deployments. This involves configuring CNI plugins (e.g., Calico, Flannel), managing network policies, load balancing, and ensuring optimal connectivity and performance for containerized applications.
Machine Identity Integration: Collaborate closely with our product and engineering teams to integrate network configurations with our mIdP, ensuring seamless and secure authentication and authorization for OT devices and applications.
Network Security Hardening: Implement and enforce robust network security best practices, including intrusion detection/prevention, vulnerability management, and access control for OT networks.
Troubleshooting and Optimization: Proactively monitor, troubleshoot, and resolve complex network issues across bare-metal, Kubernetes, and OT environments. Identify and implement optimizations to enhance network performance, reliability, and security.
Automation and Tooling: Develop and implement automation scripts and tools (e.g., Python, Ansible, Terraform) to streamline network provisioning, configuration management, and operational tasks.
Documentation and Knowledge Sharing: Create comprehensive network documentation, runbooks, and contribute to internal knowledge sharing to ensure maintainability and scalability of our infrastructure.
Stay Ahead of the Curve: Continuously research and evaluate new networking technologies, security trends, and best practices, particularly as they relate to Kubernetes, bare-metal, and OT cybersecurity.
Collaborate and Mentor: Work closely with cross-functional teams (software engineers, security analysts, product managers) and provide mentorship to junior team members.

What You’ll Bring:

5+ years of intense experience in network engineering roles, with a proven track record in complex, high-performance, and high-stakes environments.
Deep, demonstrable expertise in Kubernetes networking: You've built and scaled Kubernetes clusters on bare-metal, configured CNI plugins (not just used them), and mastered network policies, services, and ingress controllers.
Strong proficiency in Docker networking: In-depth knowledge of Docker network drivers, bridge networks, overlay networks, and container-to-container communication.
Extensive hands-on experience with bare-metal deployments: You're comfortable with physical servers, NIC bonding, VLAN tagging, and configuring network interfaces directly on hardware.
Rock solid understanding of network security principles: Firewalls, VPNs, intrusion detection/prevention systems (IDS/IPS), network access control (NAC), and secure communication protocols.
Empathy for OT/ICS environments: You totally get the unique networking and security challenges of Operational Technology, and understand common industrial protocols (Modbus, OPC UA) and architectures (e.g., Purdue Model). This isn't just a "nice-to-have"; it's critical.
Proficiency in scripting and automation: Python, Ansible, or similar languages for automating network provisioning and operations.
A relentless problem-solver: You thrive on diagnosing and resolving intricate network issues under pressure, with an unwavering focus on root cause analysis.
Exceptional communication and collaboration skills: You can articulate complex technical concepts clearly and work seamlessly with cross-functional teams.
Bachelor's degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
Self-starter with an insatiable curiosity: You're eager to learn, adapt, and drive solutions in a rapidly evolving, high-impact startup environment.

Bonus Points For:

Experience with specific machine identity solutions (PKI, certificates, secrets management).
Knowledge of software-defined networking (SDN) solutions for bare-metal.
Experience with public cloud networking (AWS, Azure, GCP) in hybrid environments.
Relevant industry certifications (e.g., CCNA, CCNP, CKS, CKAD).
Experience in a fast-paced startup environment.

Why Forge your Path with Corsha?

Real-World Impact: Your work won't just sit on a server; it will actively defend the critical operational systems that underpin our society. This is an opportunity to make a tangible, immediate difference.
Bleeding Edge: Be at the forefront of securing the intersection of cybersecurity, machine identity, and OT. We're defining the future, not just following trends.
Growth & Ownership: This is a startup – your contributions will directly shape our product, our culture, and our success. You'll work with incredible people that care and have impact.
Culture of Innovation: Join a team of brilliant, passionate engineers dedicated to solving the hardest problems. We foster a collaborative, intellectually stimulating, and supportive environment.
Competitive Compensation & Benefits: Wellness days, Generous PTO, Company-covered healthcare, 401k matching, paid parental leave, and of course snacks, lunches, and sustenance.

Ready to step up and secure the critical future of identity? Join Our Mission Today.

Reach out to us with your resume and why you think you’d make a stellar Corshian to hiring@corsha.com.

We are an Equal Opportunity Employer and reasonable accommodations may be made to enable individuals with disabilities.

Corsha

New Jobs

Platform Engineer