Senior Network & Zero-Trust Security Engineer (Remote)

Sezzle; Bogotá; On-site; COP 177,701,000 - 337,633,000; Full time

Job summary

Sezzle is seeking a Senior Security Engineer, Network & Zero Trust in Bogotá, Colombia. You will own the network pillar of Sezzle's zero-trust program, implementing default-deny micro-segmentation across Kubernetes clusters and enabling identity-aware, service-to-service connections.

Responsibilities include building the network policy tooling, rolling out segmentation, and maintaining telemetry for detections.

Qualifications

• 6+ years of experience in security, network, platform, or infrastructure engineering.
• Kubernetes networking knowledge: CNI, NetworkPolicy, DNS, ingress/egress.
• Strong AWS networking: VPCs, subnets, security groups, peering, Transit Gateway, PrivateLink, load balancers, flow logs.
• Hands-on experience with mTLS and service-to-service authentication.
• Infrastructure as code as default: Terraform and Helm.
• Ability to write code (Go, Python, or Bash) for tooling and automation.
• Investigate with packet captures and flow logs.
• Knowledge of PCI DSS network requirements and segmentation.
• Experience with AI-assisted engineering and workflows.

Responsibilities

• Own east-west segmentation across Kubernetes clusters and derive network policies from traffic.
• Deliver identity-aware transport with mutually authenticated, encrypted service-to-service connections (mTLS).
• Maintain a live network map with cloud topology and production entry points.
• Own production and cardholder-data environment segmentation and testing.
• Collaborate on private per-application access (ZTNA) for engineers reaching production.
• Own network telemetry and feed data to SIEM for detections.
• Manage cluster admission control and drift via IaC and policy-as-code.
• Contain incidents by isolating workloads and supporting incident response.
• Participate in threat modeling and design reviews for traffic flow changes.

Skills

Kubernetes networking

AWS networking

mTLS

IaC

Go

Python

Bash

Packet capture

Tools

Terraform

Helm

Istio

Kubernetes

Job description

Sezzle is seeking a Senior Security Engineer, Network & Zero Trust in Bogotá, Colombia. You will own the network pillar of Sezzle's zero-trust program, implementing default-deny micro-segmentation across Kubernetes clusters and enabling identity-aware, service-to-service connections.

Responsibilities include building the network policy tooling, rolling out segmentation, and maintaining telemetry for detections.