Remote opportunity at
SezzleSenior Security Engineer, Network & Zero Trust
Sezzle is seeking a Senior Security Engineer, Network & Zero Trust to lead the network pillar of its zero-trust initiative. This hands-on position involves overseeing default-deny…
Career Tools
About This Role
Sezzle is seeking a Senior Security Engineer, Network & Zero Trust to lead the network pillar of its zero-trust initiative. This hands-on position involves overseeing default-deny micro-segmentation across Kubernetes clusters and AWS environments, implementing identity-aware service transport, managing network policies as reviewed code, and collaborating closely with security platform, detection and response, platform, and IAM teams. The ideal candidate utilizes AI-assisted engineering workflows and brings extensive experience in cloud production…
Job Description
Sezzle is seeking a Senior Security Engineer, Network & Zero Trust to lead the network pillar of its zero-trust initiative. This hands-on position involves overseeing default-deny micro-segmentation across Kubernetes clusters and AWS environments, implementing identity-aware service transport, managing network policies as reviewed code, and collaborating closely with security platform, detection and response, platform, and IAM teams. The ideal candidate utilizes AI-assisted engineering workflows and brings extensive experience in cloud production environments.
Sezzle operates as a fintech company focused on financial empowerment through interest-free installment plans and shopping services. The organization values speed, high standards, calculated risk-taking, and open-source technology.
Responsibilities
- Manage east-west segmentation across Kubernetes clusters by creating policies derived from observed traffic
- Deploy mutually authenticated and encrypted service-to-service connections
- Maintain a continuously reconciled live network map of VPC peerings, tunnels, cross-account links, and public entry points
- Enforce production and cardholder-data environment boundaries and conduct segmentation testing
- Collaborate with IT to provide per-application private access for engineers and operators
- Oversee east-west and north-south network telemetry and integrate logs with the SIEM
- Regulate cluster admission control, manage network policies via IaC, and automatically revert drift
- Isolate workloads during potential incidents and participate in incident response
- Engage in threat modeling, design reviews, and an on-call rotation
Requirements
- At least 6 years of professional background in security, network, platform, or infrastructure engineering with hands-on cloud production experience
- Practical expertise in Kubernetes networking including CNI, DNS, and NetworkPolicy semantics
- Proficiency in AWS networking such as VPCs, subnets, transit gateways, and flow logs
- Experience implementing mTLS and service-to-service authentication
- Proficiency with infrastructure as code tools like Terraform and Helm
- Programming capability in Go, Python, or Bash
- Familiarity with PCI DSS network requirements and segmentation testing
- Active use of AI tooling in engineering workflows
Qualifications
- Familiarity with Cilium, eBPF, and Hubble flow observability in production
- Experience managing fleet-scale mTLS, certificate lifecycle, and SPIFFE/SPIRE standards
- History of building adopted AI-assisted workflows
- Background in evaluating or deploying ZTNA and identity-aware proxies
- Knowledge of policy-as-code tools such as OPA, Gatekeeper, Kyverno, or conftest
- Experience with network detection, intrusion detection, and incident containment
- Familiarity with SOC 2 and FFIEC network security expectations
- Prior work within fintech, payments, buy now pay later, or regulated industries
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the salary range for this role?
The gross salary range is USD 5,000 to 9,500 per month, determined by experience level and background.
Is this position remote?
The source posting indicates remote employment.
What kind of experience is required?
Applicants need 6 or more years of experience in security, network, platform, or infrastructure engineering, along with hands-on cloud production network control ownership.
How do I apply for this position?
The provided posting does not specify application instructions.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.