Senior Security Engineer, Zero-Trust Network & Cloud

Sezzle; Tandil; Presencial; ARS 86.234.000 - 163.844.000; Jornada completa

Descripción de la vacante

Sezzle seeks a hands-on Senior Security Engineer, Network & Zero Trust to own the network pillar of the zero-trust program across Kubernetes clusters and AWS accounts. You will write policies, tooling, and rollout automation, with focus on identity-bound paths, mTLS, and drift control.

You will collaborate with security, platform, and IAM teams, shaping a scalable, auditable network security posture. Experience in fintech or regulated environments is valued in this role at Sezzle.

Formación

• 6+ years of experience in security, network, platform, or infrastructure engineering with hands-on ownership of network controls in cloud production environments.
• Deep Kubernetes networking knowledge (CNI, NetworkPolicy) and experience rolling segmentation on live clusters.
• Strong AWS networking (VPCs, subnets, security groups, Transit Gateway, PrivateLink) and related services.
• Hands-on experience with mTLS and service-to-service authentication.
• Infrastructure as code as default (Terraform/Helm/CI) across repositories.
• Ability to write code (Go, Python, Bash) for tooling and automation.
• PCI DSS network requirements familiarity.
• AI-forward engineering practices using AI tooling.

Responsabilidades

• Own east-west segmentation across Kubernetes clusters and derive network policies from traffic observations.
• Deliver identity-aware transport with mutually authenticated, encrypted service-to-service connections (mTLS).
• Maintain live map of network topology, peering, tunnels and production entry points.
• Own segmentation of production and PCI/DSS boundaries; run segmentation testing with security team.
• Collaborate on private access (ZTNA) for per-application access to production systems.
• Own network telemetry and feed data to SIEM for detections.
• Manage cluster admission control and drift drift-reversion via IaC pipelines.
• Contribute to threat modeling, design reviews, and on-call rotation for network controls.

Conocimientos

Security engineering

Kubernetes networking

AWS networking

mTLS

Infrastructure as code

Go/Python/Bash

PCI DSS

AI tooling

Herramientas

Terraform

Helm

Git

Descripción del empleo

Sezzle seeks a hands-on Senior Security Engineer, Network & Zero Trust to own the network pillar of the zero-trust program across Kubernetes clusters and AWS accounts. You will write policies, tooling, and rollout automation, with focus on identity-bound paths, mTLS, and drift control.

You will collaborate with security, platform, and IAM teams, shaping a scalable, auditable network security posture. Experience in fintech or regulated environments is valued in this role at Sezzle.