Senior Network & Zero Trust Security Engineer

Sezzle; United States; Remote; USD 56,000 - 106,000; Full time

Job summary

Sezzle is seeking a hands-on Senior Security Engineer, Network & Zero Trust to own the network pillar of its zero‑trust program across Kubernetes, AWS, and service identities. You will implement default‑deny segmentation, mTLS, and telemetry, writing code and tooling to automate rollout and integration with other teams.

You will work with security, platform, and IAM teams to harden production while enabling scalable, private access and identity‑bound paths.

Qualifications

• 6+ years in security/network/platform/infrastructure engineering with hands-on network controls in cloud production
• Deep Kubernetes networking knowledge: CNI, NetworkPolicy, DNS, ingress/egress on live clusters
• Strong AWS networking: VPCs, subnets, security groups, peering, PrivateLink, flow logs

Responsibilities

• Own east–west segmentation across Kubernetes clusters with default-deny policies
• Deliver identity-aware transport with mTLS for service-to-service connections
• Maintain live network map from cloud APIs and ensure paths are justified
• Own segmentation of production and PCI/DSS cardholder environment boundaries
• Collaborate on private access (ZTNA) for production systems
• Own network telemetry and feed data to SIEM for detections

Skills

Kubernetes networking

AWS networking

mTLS/service-to-service auth

IaC (Terraform/Helm)

Go/Python/Bash coding

Policy as code

Tools

Terraform

Helm

Git

Linux

Job description

Sezzle is seeking a hands-on Senior Security Engineer, Network & Zero Trust to own the network pillar of its zero‑trust program across Kubernetes, AWS, and service identities. You will implement default‑deny segmentation, mTLS, and telemetry, writing code and tooling to automate rollout and integration with other teams.

You will work with security, platform, and IAM teams to harden production while enabling scalable, private access and identity‑bound paths.