Senior Network & Zero‑Trust Security Engineer – Remote

Sezzle; Argentina; Remote; ARS 84,512,000 - 160,573,000; Full time

Job summary

Sezzle is seeking a Senior Security Engineer focused on Network & Zero Trust to own the network pillar of its zero-trust program across Kubernetes clusters, AWS accounts, and interconnections. You’ll implement default-deny segmentation, identity-aware transport, and service identity-driven authorization, while building tooling, policies, and rollout automations.

You’ll work with security, platform, IAM, and detection teams to ensure secure, observable networks and scalable, incident-ready

Qualifications

• Languages: Golang, Typescript, Python

Responsibilities

• Own east-west segmentation across Kubernetes clusters and derive network policies from observed traffic.
• Deliver identity-aware transport (mTLS) for service-to-service connections.
• Maintain live map of the network including VPC peerings and cross-account links.
• Own segmentation of production and PCI DSS CDE boundaries and run segmentation testing.
• Partner with IT on private access (ZTNA) for engineers reaching production systems.
• Own network telemetry and feed data to SIEM for detections.
• Own cluster admission control and drift detection with IaC pipelines and git-based policies.
• Contain: isolate workloads quickly when threats are detected and support incident response.
• Participate in threat modeling and design reviews for traffic flow changes and on-call rotation for controls.

Skills

Golang

Typescript

Python

React

Git

Gitlab

Testing

Open Source

Tools

Gitlab

Git

React

Job description

Sezzle is seeking a Senior Security Engineer focused on Network & Zero Trust to own the network pillar of its zero-trust program across Kubernetes clusters, AWS accounts, and interconnections. You’ll implement default-deny segmentation, identity-aware transport, and service identity-driven authorization, while building tooling, policies, and rollout automations.

You’ll work with security, platform, IAM, and detection teams to ensure secure, observable networks and scalable, incident-ready