Senior Security Engineer — Network & Zero Trust (Remote)

Sezzle; México; Remote; MXN 1,030,000 - 1,958,000; Full time

Job summary

Sezzle is seeking a hands-on Senior Security Engineer, Network & Zero Trust to own the network pillar of our zero-trust program across Kubernetes clusters and AWS accounts. You will develop default-deny segmentation, identity-aware service-to-service transport, and drift-free configurations using IaC.

With 6+ years in security and deep Kubernetes/AWS networking expertise, you’ll implement policy-driven control, observe traffic, and feed telemetry to SIEMs for rapid detection.

Qualifications

• 6+ years in security, network, or infra engineering.
• Deep Kubernetes networking knowledge (CNI, NetworkPolicy).
• Strong AWS networking: VPCs, subnets, security groups.
• Hands-on experience with mTLS and service auth.
• Infrastructure as code with Terraform/Helm, CI.
• Ability to write Go/Python/Bash tooling.
• Packet capture and log analysis skills.
• PCI DSS network segmentation knowledge.

Responsibilities

• Own east-west segmentation across Kubernetes clusters and derive network policies from traffic observations.
• Deliver identity-aware transport with mutually authenticated, encrypted service-to-service connections (mTLS).
• Maintain a live network map using cloud APIs and cross-account links.
• Segment production and cardholder-data environment, review peering and exposure.
• Partner with IT on private access (ZTNA) for engineers reaching production systems.
• Own network telemetry and feed flow logs to the SIEM for detection.
• Manage cluster admission control and drift via IaC (Git, CI).
• Contain incidents by isolating workloads and supporting incident response when needed.
• Participate in threat modeling and on-call rotation for network controls.

Skills

Kubernetes networking

AWS networking

mTLS / service auth

IaC

Go / Python / Bash

Packet capture analysis

Threat modeling

Zero Trust / segmentation

Cilium / eBPF

Security incident response

Tools

Terraform

Helm

Git

GitLab

Istio

Linkerd

Cilium

Job description

Sezzle is seeking a hands-on Senior Security Engineer, Network & Zero Trust to own the network pillar of our zero-trust program across Kubernetes clusters and AWS accounts. You will develop default-deny segmentation, identity-aware service-to-service transport, and drift-free configurations using IaC.

With 6+ years in security and deep Kubernetes/AWS networking expertise, you’ll implement policy-driven control, observe traffic, and feed telemetry to SIEMs for rapid detection.