Network Engineer

• Own east-west segmentation across Kubernetes clusters using default-deny micro-segmentation and identity-bound paths
• Design and roll out mutually authenticated, encrypted service-to-service connections using mTLS
• Maintain a continuously reconciled map of VPC peerings, tunnels, cross-account links, and public entry points
• Implement and enforce production and cardholder-data environment segmentation boundaries
• Review network peerings and public exposure and run segmentation testing with the security team
• Partner with IT to evaluate and deliver per-application zero-trust network access for production systems
• Own east-west and north-south network telemetry and feed identity-aware flow data to the SIEM
• Manage cluster admission control, security groups, firewall rules, infrastructure as code, drift detection, and automatic remediation
• Build containment capabilities for isolating workloads or segments during lateral-movement incidents
• Participate in threat modeling, traffic-flow design reviews, incident response, and on-call rotation
• Write policies, tooling, and rollout automation and carry changes through other teams’ services
• Report to the Director of Information Security and collaborate with security platform, detection and response, platform, IAM, and IT teams
• Use and build agentic workflows for flow analysis, policy generation, and drift review

Explore Senior Security Engineer, Network, Zero Trust at Sezzle. Review requirements and application details.