7 hours ago
Remote, TurkeySenior
Responsibilities
- Own default-deny east-west segmentation and identity-bound network policies across Kubernetes clusters.
- Design and roll out mTLS-encrypted, identity-aware service-to-service connectivity.
- Continuously map VPC peerings, tunnels, cross-account links, and public entry points using cloud APIs.
- Enforce production and cardholder-data environment boundaries and conduct segmentation testing.
- Evaluate and help deliver per-application Zero Trust Network Access for engineers and operators.
- Own east-west and north-south flow telemetry and feed network data to the SIEM.
- Manage admission controls, security groups, firewall rules, infrastructure-as-code, and automated drift remediation.
- Build rapid containment capabilities and participate in network-related incident response, threat modeling, design reviews, and on-call.
- Develop tooling, policy-generation workflows, flow analysis, and drift-review automation, including AI-assisted workflows.
Requirements
- 6+ years of experience in security, network, platform, or infrastructure engineering with hands-on ownership of cloud production network controls.
- Deep Kubernetes networking knowledge, including CNI, NetworkPolicy semantics, DNS, ingress, egress, and live-cluster segmentation rollouts.
- Strong AWS networking experience with VPCs, subnets, security groups, peering, Transit Gateway, PrivateLink, load balancers, and flow logs.
- Hands-on experience with mTLS and service-to-service authentication through service meshes, proxies, or CNI-level encryption.
- Experience using Terraform and Helm or equivalents through merge requests and CI across repositories.
- Ability to write production tooling and automation in Go, Python, or Bash.
- Ability to investigate with packet captures, flow logs, and system-level data.
- Working knowledge of PCI DSS network requirements, including segmentation, cardholder-data environment scoping, and segmentation testing.
- Current practical use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Preferred experience with Cilium, eBPF, Hubble, service meshes, SPIFFE/SPIRE, ZTNA, policy-as-code, admission control, network detection, incident containment, SOC 2, FFIEC-style examinations, and regulated fintech or payments environments.
Benefits
- Full-time remote role.
- Monthly gross compensation of $5,000-$9,500 USD based on experience.
- Participation in an on-call rotation for owned controls.
- Work with open-source technologies and AI-assisted engineering workflows.
- Culture emphasizing high standards, ownership, innovation, speed, trust, and results.
Tech Stack
AWSBashElasticsearchGitGoHelmIstioKubernetesMySQLPostgreSQLPythonReactReact NativeTerraformTypeScript
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.