Senior Security Engineer, Network & Zero Trust

Sezzle

. Own east-west segmentation across Kubernetes clusters using default-deny network policies and explicitly allowed, identity-bound paths .

Posted 11/3/2026full-timeRemote • SerbiaSenior💰 $5,000 - $9,500 per monthWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in security and network engineering, particularly in Kubernetes networking and AWS environments. Proficient in implementing segmentation, mTLS, and infrastructure-as-code practices while collaborating with cross-functional teams to enhance security measures.

Highest-signal resume keywords

Kubernetes NetworkingAWS NetworkingMTLS ImplementationInfrastructure-as-CodePCI DSS Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network PolicyService-to-Service AuthenticationTerraformGo ProgrammingPython ProgrammingBash ScriptingPacket Capture AnalysisFlow Log InvestigationSegmentation TestingDrift Detection

Tools & Technologies

AI ToolingHelmSIEMCiliumIstioLinkerdZTNAPolicy-as-CodeAdmission ControlIDS/IPS

Industry Keywords

FintechPaymentsBNPLSOC 2FFIEC

Tech Stack

Tools & technologies

AWSCloudDNSKubernetesPythonTerraformGo

About the role

Key responsibilities & impact

Own east-west segmentation across Kubernetes clusters using default-deny network policies and explicitly allowed, identity-bound paths
Design and roll out mutually authenticated, encrypted service-to-service connections using mTLS
Maintain a continuously reconciled map of VPC peerings, tunnels, cross-account links, and public entry points
Own segmentation of production and the cardholder-data environment, including boundary enforcement and segmentation testing
Partner with IT to evaluate and deliver per-application private access/ZTNA
Own east-west and north-south network telemetry and feed flow data to the SIEM
Own cluster admission control, security groups, firewall rules, infrastructure-as-code enforcement, and drift detection and remediation
Build containment mechanisms for isolating workloads or segments during lateral-movement incidents
Participate in threat modeling, traffic-flow design reviews, incident response, and on-call rotation
Write policies, tooling, and rollout automation and carry changes through other teams’ services without disrupting delivery
Report to the Director of Information Security and collaborate with security platform, detection and response, platform, IAM, and IT teams
Use and build AI-assisted agentic workflows for flow analysis, policy generation, and drift review

Requirements

What you’ll need

6+ years of experience in security, network, platform, or infrastructure engineering, with hands-on ownership of network controls in cloud production environments
Deep practical Kubernetes networking knowledge, including CNI, NetworkPolicy semantics, DNS, ingress, and egress
Experience rolling segmentation out on live clusters without outages
Strong AWS networking knowledge: VPCs, subnets, security groups, peering, Transit Gateway, PrivateLink, load balancers, and flow logs
Hands-on experience with mTLS and service-to-service authentication
Infrastructure-as-code experience with Terraform and Helm or equivalents, using merge requests and CI
Ability to write production code in Go, Python, or Bash for tooling and automation
Ability to investigate using packet captures, flow logs, and system-level data
Working knowledge of PCI DSS network requirements, including segmentation, cardholder-data environment scoping, and segmentation testing
Demonstrated current use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations
Preferred: Cilium/eBPF, Hubble or equivalent, fleet-scale mTLS, certificate lifecycle management, Istio, Linkerd, Cilium service mesh, SPIFFE/SPIRE, AI-assisted workflows, ZTNA, policy-as-code, admission control, IDS/IPS, lateral-movement detection, SOC 2, FFIEC-style expectations, and fintech/payments/BNPL experience

Benefits

Comp & perks

Competitive gross salary of $5,000–$9,500 USD per month, based on experience
AI-assisted engineering workflows and tools
Open-source-focused technology environment
Diverse, purpose-driven company culture
Full-time employment