Senior Security Engineer, Network & Zero Trust

📋 Description

• Own east-west segmentation across Kubernetes clusters: design segmentation model, derive network
• Deliver identity-aware transport: design and roll out mutually authenticated, encrypted
• Keep a live map of the network: VPC peerings, tunnels, cross-account links, and public entry
• Own segmentation of production and cardholder-data environment: implement and enforce CDE and
• Partner with IT on private access: evaluate and help deliver per-application access (ZTNA) for
• Own network telemetry: flow logs east-west and north-south with identity, feed to SIEM for

🎯 Requirements

• 6+ years of experience in security, network, platform, or infrastructure engineering, with hands-on
• Deep, practical Kubernetes networking knowledge: CNI, NetworkPolicy semantics, DNS, ingress/egress
• Strong AWS networking: VPCs, subnets, security groups, peering and Transit Gateway, PrivateLink
• Hands-on experience with mTLS and service-to-service authentication (service mesh, proxies, or
• Infrastructure as code as default way of working — Terraform and Helm or equivalents, through merge
• Ability to write real code (Go, Python, or Bash) for tooling and automation

🎁 Benefits

• At Sezzle, we are more than just brilliant engineers, passionate data enthusiasts, out-of-the-box
• We believe in surrounding ourselves with not only the best and the brightest individuals, but those
• Our culture is not defined by a certain set of perks designed to give the illusion of the