Remote Senior Security Engineer, Network & Zero Trust

Sezzle; Buenos Aires; Remote; ARS 84,478,000 - 160,507,000; Full time

Job summary

Sezzle is hiring a Senior Security Engineer, Network & Zero Trust to own the network pillar of the company’s zero-trust program. You will secure east-west segmentation across Kubernetes clusters in cloud environments, implement identity-aware transport, and maintain a live map of network topology.

You will write policies and tooling, drive guardrails via IaC, and collaborate with IAM, security platform, and incident-response teams.

Qualifications

• 6+ years in security, network, or infra engineering with hands-on network controls in cloud environments.
• Strong Kubernetes networking knowledge and experience rolling segmentation on live clusters.
• Proficient in AWS networking, VPCs, subnets, security groups and peering.

Responsibilities

• Own east-west segmentation across Kubernetes clusters with default-deny policies.
• Deliver identity-aware transport (mTLS) for service-to-service connections.
• Maintain live network map from cloud APIs and ensure auditable paths.
• Segmentation testing for production and cardholder environments (PCI related).
• Collaborate on private access (ZTNA) for engineers reaching production.
• Own network telemetry and feed data to SIEM for detections.
• Manage cluster admission control and drift detection via IaC pipelines.
• Participate in threat modeling and on-call rotation for network controls.

Skills

Kubernetes networking

mTLS

AWS networking

Go / Python

Infrastructure as code

Git & CI

SIEM telemetry

Tools

Terraform

Helm

Gitlab

Service mesh (Istio/Linkerd)

Job description

Sezzle is hiring a Senior Security Engineer, Network & Zero Trust to own the network pillar of the company’s zero-trust program. You will secure east-west segmentation across Kubernetes clusters in cloud environments, implement identity-aware transport, and maintain a live map of network topology.

You will write policies and tooling, drive guardrails via IaC, and collaborate with IAM, security platform, and incident-response teams.