Senior Security Engineer: Remote, Network & Zero Trust

Sezzle; Puerto Bogotá; A distancia; COP 177.701.000 - 337.633.000; Jornada completa

Descripción de la vacante

Sezzle is seeking a Senior Security Engineer to own the network pillar of its zero‑trust program across Kubernetes clusters and AWS accounts.

You will write policies and tooling, implement default‑deny segmentation, and enable identity‑bound, service‑to‑service communication with mTLS. This role drives network telemetry, drift control, and secure production access in a fintech environment.

Formación

• 6+ years of experience in security, network, platform, or infrastructure engineering.
• Practical Kubernetes networking knowledge: CNI, NetworkPolicy, DNS, ingress/egress.
• Strong AWS networking: VPCs, subnets, security groups, peering, Transit Gateway.
• Hands‑on experience with mTLS and service‑to‑service authentication.
• Infrastructure as code as default: Terraform and Helm or equivalents.
• Ability to write real code (Go, Python, or Bash) for tooling and automation.
• Investigate with packet captures, flow logs, and system‑level data.
• Knowledge of PCI DSS network requirements and CDE segmentation testing.
• Experience with AI‑assisted engineering and practical applications.

Responsabilidades

• Own east‑west segmentation across Kubernetes clusters and derive network policies.
• Deliver identity‑aware transport (mTLS) for service‑to‑service connections.
• Maintain a live network map from cloud APIs and reconcile entries.
• Own segmentation of production and cardholder data environment boundaries.
• Collaborate on private access (ZTNA) for engineers reaching production systems.
• Own network telemetry and feed SIEM for detection engineering.
• Manage cluster admission control and drift, with IaC‑driven policies.
• Contain workloads and support incident response when needed.
• Participate in threat modeling and design reviews for traffic flows.

Conocimientos

Golang

Typescript

Python

Kubernetes networking

Terraform

CI/CD (GitLab)

Herramientas

Istio

Linkerd

Cilium

Helm

GitLab

Descripción del empleo

Sezzle is seeking a Senior Security Engineer to own the network pillar of its zero‑trust program across Kubernetes clusters and AWS accounts.

You will write policies and tooling, implement default‑deny segmentation, and enable identity‑bound, service‑to‑service communication with mTLS. This role drives network telemetry, drift control, and secure production access in a fintech environment.