28 days ago
Remote, SerbiaSenior
Responsibilities
- Own east-west segmentation and default-deny network policies across Kubernetes clusters.
- Design and roll out identity-aware, encrypted service-to-service transport using mTLS.
- Maintain a continuously reconciled map of VPC peerings, tunnels, cross-account links, and public entry points.
- Enforce segmentation boundaries for production and the cardholder-data environment and conduct segmentation testing.
- Evaluate and help deliver per-application Zero Trust Network Access for production operators.
- Own east-west and north-south flow telemetry and feed it to the SIEM.
- Manage workload admission controls, security groups, firewall rules, infrastructure as code, drift detection, and automated remediation.
- Build containment capabilities and participate in incident response, threat modeling, design reviews, and on-call rotations.
Requirements
- 6+ years of experience in security, network, platform, or infrastructure engineering with hands-on ownership of cloud production network controls.
- Deep Kubernetes networking knowledge, including CNI, NetworkPolicy semantics, DNS, ingress, egress, and live-cluster segmentation rollouts.
- Strong AWS networking experience with VPCs, subnets, security groups, peering, Transit Gateway, PrivateLink, load balancers, and flow logs.
- Hands-on mTLS and service-to-service authentication experience through service meshes, proxies, or CNI-level encryption.
- Experience using Terraform and Helm or equivalents through code review and CI across multiple repositories.
- Ability to write production tooling and automation in Go, Python, or Bash.
- Ability to investigate using packet captures, flow logs, and system-level data.
- Working knowledge of PCI DSS network requirements, including CDE segmentation, scoping, and testing.
- Current practical use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Preferred: production experience with Cilium, eBPF, Hubble, service meshes, SPIFFE/SPIRE, ZTNA, policy-as-code, OPA/Gatekeeper, Kyverno, conftest, network detection, incident containment, SOC 2, FFIEC-style examinations, or regulated fintech and payments environments.
Benefits
- Full-time remote position.
- Gross compensation of $5,000–$9,500 USD per month, based on experience level.
Tech Stack
AWSBashElasticsearchGitGoHelmIstioKubernetesMySQLPostgreSQLPythonReactReact NativeTerraformTypeScript
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.