Senior Network & Zero-Trust Security Engineer (Remote)

Sezzle; México; Remote; MXN 1,030,000 - 1,957,000; Full time

Job summary

Sezzle is seeking a hands-on Senior Security Engineer, Network & Zero Trust, to own the network pillar of the company's zero-trust program across Kubernetes, AWS, and interconnections. You will implement default-deny segmentation, identity-aware transport, and service identity-based authorization, while driving tooling, policies, and rollout automation.

You will report to the Director of Information Security, collaborating with security platform, detection and response, IAM, and platform teams

Qualifications

• 6+ years in security, network, or infrastructure engineering
• Hands-on ownership of network controls in cloud production environments
• Kubernetes networking expertise and experience rolling segmentation on live clusters
• Experience with mTLS and service-to-service authentication

Responsibilities

• Own east-west segmentation across Kubernetes clusters and derive network policies
• Deliver identity-aware transport with mutually authenticated, encrypted connections
• Maintain live map of the network from cloud APIs and ensure paths are justified
• Own segmentation of production and cardholder-data environment (PCI scope)
• Partner with IT on private access for per-application access (ZTNA)
• Own network telemetry and feed to SIEM for detections
• Manage cluster admission control, policy as code, and drift detection
• Contain workloads and participate in incident response when needed
• Engage in threat modeling and design reviews affecting traffic flows

Skills

Kubernetes networking

AWS networking

mTLS

IaC (Terraform)

Go/Python/Bash

Tools

Terraform

Helm

Job description

Sezzle is seeking a hands-on Senior Security Engineer, Network & Zero Trust, to own the network pillar of the company's zero-trust program across Kubernetes, AWS, and interconnections. You will implement default-deny segmentation, identity-aware transport, and service identity-based authorization, while driving tooling, policies, and rollout automation.

You will report to the Director of Information Security, collaborating with security platform, detection and response, IAM, and platform teams