Cloud-Native Network Optimization and Security Hardening for E-Commerce Platform (High Traffic)

We are seeking an experienced DevOps engineer to architect, implement, and secure a cloud-native network infrastructure for our rapidly growing e-commerce platform. The project involves migrating existing on-premise networking components to a Kubernetes environment within AWS, focusing heavily on network segmentation, microsegmentation using Cilium or Calico, and implementing robust security policies. The ideal candidate will have a deep understanding of Kubernetes networking concepts (CNI, Service Mesh), AWS network services (VPC, Security Groups, Network ACLs, Route 53), and a proven track record of implementing network security best practices. We need to eliminate single points of failure, improve overall performance and resilience under high-traffic conditions (peak loads exceeding 10,000 requests per second), and ensure compliance with industry security standards (PCI DSS). This includes implementing intrusion detection/prevention systems, configuring network firewalls, and conducting regular vulnerability assessments. Experience with Terraform or similar infrastructure-as-code tools is essential for automating network provisioning and configuration. The final deliverable will be a fully automated, secure, and optimized Kubernetes network infrastructure within AWS, along with comprehensive documentation and training for our internal team. We will require you to fully document all configuration changes, deployment procedures, and troubleshooting steps.