Senior Network Security Engineer - Zero-Trust & Cloud

Sezzle; Ciudad de México; On-site; MXN 1,030,000 - 1,958,000; Full time

Job summary

Sezzle is seeking a hands-on Senior Security Engineer, Network & Zero Trust, to own the network pillar of Sezzle's zero-trust program across Kubernetes, AWS, and interconnections. You will write policies, tooling, and rollout automation, while collaborating with security and platform teams.

You will implement default-deny segmentation, enable identity-aware service-to-service communication, and provide telemetry for detections. This role blends engineering rigor with security leadership at scale.

Qualifications

• 6+ years of experience in security, network, platform, or infrastructure engineering with hands-on ownership of network controls in cloud production environments.
• Deep Kubernetes networking knowledge: CNI, NetworkPolicy semantics, DNS, ingress/egress, and rolling segmentation on live clusters.
• Strong AWS networking: VPCs, subnets, security groups, peering and Transit Gateway, PrivateLink, load balancers, flow logs.
• Hands-on experience with mTLS and service-to-service authentication.
• Infrastructure as code as your default way of working — Terraform and Helm or equivalents, through merge requests and CI.
• Ability to write real code (Go, Python, or Bash) for tooling and automation.
• Knowledge of PCI DSS network requirements and segmentation testing.
• Demonstrated AI-forward engineering using AI tooling in practice.

Responsibilities

• Own east-west segmentation across Kubernetes clusters and derive network policies from observed traffic.
• Deliver identity-aware transport with mutual TLS for service-to-service connections.
• Maintain live network maps using cloud APIs and ensure all production paths are known and justified.
• Own segmentation of production and cardholder-data environments and review peering/public exposure.
• Partner on private access (ZTNA) for engineers reaching production systems.
• Own network telemetry and feed to SIEM for detection use.
• Maintain cluster admission control and drift detection with git-declared policies.
• Contain incidents by isolating workloads and supporting incident response.

Skills

Kubernetes networking

AWS networking

mTLS

Infrastructure as code

Go/Python

Threat modeling

AI tooling

Tools

Terraform

Helm

Git

CI/CD

Job description

Sezzle is seeking a hands-on Senior Security Engineer, Network & Zero Trust, to own the network pillar of Sezzle's zero-trust program across Kubernetes, AWS, and interconnections. You will write policies, tooling, and rollout automation, while collaborating with security and platform teams.

You will implement default-deny segmentation, enable identity-aware service-to-service communication, and provide telemetry for detections. This role blends engineering rigor with security leadership at scale.