Senior Security Engineer, Network & Zero Trust

Sezzle

. Own east-west segmentation across Kubernetes clusters using default-deny micro-segmentation and explicitly allowed, identity-bound paths .

Posted 11/3/2026full-timeRemote • ColombiaSenior💰 $5,000 - $9,500 per monthWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Kubernetes networking, including CNI and NetworkPolicy, while ensuring compliance with PCI DSS and implementing secure service-to-service authentication using mTLS. Proficient in infrastructure as code with Terraform and Helm, alongside strong capabilities in network telemetry and incident containment.

Highest-signal resume keywords

Kubernetes NetworkingAWS NetworkingMTLS AuthenticationInfrastructure As CodeAI Tooling

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

KubernetesAWSMTLSTerraformHelmGoPythonBashPacket Capture AnalysisPCI DSS

Tools & Technologies

CiliumEBPFHubbleZTNAPolicy-As-CodeSIEMAI WorkflowsFlow LogsTransit GatewayPrivateLink

Industry Keywords

CDESegmentation TestingSOC 2FFIECRegulated Industry

Tech Stack

Tools & technologies

AWSCloudDNSKubernetesPythonTerraformGo

About the role

Key responsibilities & impact

Own east-west segmentation across Kubernetes clusters using default-deny micro-segmentation and explicitly allowed, identity-bound paths
Design and roll out mutually authenticated, encrypted service-to-service connections using mTLS
Maintain a continuously reconciled map of VPC peerings, tunnels, cross-account links, and public entry points
Segment production and the cardholder-data environment, enforce CDE and high-trust-tier boundaries, and conduct segmentation testing
Partner with IT to evaluate and deliver per-application private access/ZTNA
Own east-west and north-south network telemetry and feed identity-aware flow data to the SIEM
Own cluster admission control, infrastructure-as-code network controls, and automated drift detection and remediation
Build containment mechanisms for isolating workloads or segments during lateral-movement incidents
Participate in threat modeling, traffic-flow design reviews, and the on-call rotation
Write policies, tooling, and rollout automation and coordinate changes across other teams’ services
Use and build agentic AI workflows for flow analysis, policy generation, and drift review
Report to the Director of Information Security and collaborate with security platform, detection and response, platform, IAM, and IT teams

Requirements

What you’ll need

6+ years of experience in security, network, platform, or infrastructure engineering, with hands-on ownership of network controls in cloud production environments
Deep practical Kubernetes networking knowledge, including CNI, NetworkPolicy semantics, DNS, ingress/egress, and live-cluster segmentation without outages
Strong AWS networking knowledge: VPCs, subnets, security groups, peering, Transit Gateway, PrivateLink, load balancers, and flow logs
Hands-on experience with mTLS and service-to-service authentication
Infrastructure as code using Terraform and Helm or equivalents through merge requests and CI
Ability to write production code in Go, Python, or Bash for tooling and automation
Ability to investigate with packet captures, flow logs, and system-level data
Working knowledge of PCI DSS network requirements, including segmentation, CDE scoping, and segmentation testing
Demonstrated current use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations
Preferred: Cilium/eBPF, Hubble or equivalent, fleet-scale mTLS and certificate lifecycle, SPIFFE/SPIRE, AI-assisted workflows, ZTNA, policy-as-code, admission control, network detection, incident containment, SOC 2, FFIEC-style expectations, and regulated-industry experience

Benefits

Comp & perks

Competitive gross salary of $5,000–$9,500 USD per month, based on experience level
AI-assisted engineering workflows and tools
On-call rotation participation for owned controls
Collaborative work with security platform, detection and response, platform, IAM, and IT teams
Open-source-focused technology environment
Full-time employment