Senior Security Engineer, Network & Zero Trust (Remote)

Sezzle; Fatih; On-site; TRY 2,761,000 - 5,246,000; Full time

Job summary

Sezzle is seeking a hands-on Senior Security Engineer, Network & Zero Trust to own the network pillar of the zero‑trust program across Kubernetes clusters and AWS accounts. You will build default‑deny segmentation, identity‑aware transport, and per‑application private access while delivering automation and telemetry to support detections.

You will write policies, tooling, and rollout automation, collaborating with security, platform, IAM, and incident response teams to ensure secure, scalable

Qualifications

• 6+ years of security, network, or infrastructure engineering.
• Deep Kubernetes networking knowledge: CNI, NetworkPolicy, DNS, ingress/egress.
• Strong AWS networking: VPCs, subnets, security groups, peering, PrivateLink.

Responsibilities

• Own east‑west segmentation across Kubernetes clusters with default‑deny policies.
• Deliver identity‑aware transport with mTLS service‑to‑service connections.
• Maintain live network map from cloud APIs and ensure paths are justified.
• Segment production and cardholder data environment boundaries and run segmentation testing.
• Collaborate on private access (ZTNA) for engineers reaching production.

Skills

Security engineering

Kubernetes networking

AWS networking

Go

Python

IaC

CI/CD

Packet capture

Tools

Terraform

Helm

Git

Istio

Cilium

Gatekeeper

Job description

Sezzle is seeking a hands-on Senior Security Engineer, Network & Zero Trust to own the network pillar of the zero‑trust program across Kubernetes clusters and AWS accounts. You will build default‑deny segmentation, identity‑aware transport, and per‑application private access while delivering automation and telemetry to support detections.

You will write policies, tooling, and rollout automation, collaborating with security, platform, IAM, and incident response teams to ensure secure, scalable