7 hours ago
Remote, ArgentinaSenior
Responsibilities
- Own east-west network segmentation and default-deny NetworkPolicy controls across Kubernetes clusters.
- Design and roll out identity-aware, encrypted service-to-service connectivity using mTLS.
- Build continuously reconciled maps of VPC peerings, tunnels, cross-account links, and public entry points.
- Implement and enforce production and cardholder-data-environment segmentation boundaries and conduct segmentation testing.
- Partner with IT on per-application private access and ZTNA solutions.
- Own east-west and north-south flow telemetry and feed network data to the SIEM.
- Manage workload admission controls, security groups, firewall rules, infrastructure-as-code controls, and automated drift remediation.
- Build containment capabilities and participate in incident response, threat modeling, design reviews, and on-call support.
- Develop AI-assisted workflows for flow analysis, policy generation, and drift review.
Requirements
- 6+ years of experience in security, network, platform, or infrastructure engineering with hands-on ownership of cloud production network controls.
- Deep Kubernetes networking knowledge, including CNI, NetworkPolicy semantics, DNS, ingress, and egress, with experience deploying segmentation without outages.
- Strong AWS networking experience with VPCs, subnets, security groups, peering, Transit Gateway, PrivateLink, load balancers, and flow logs.
- Hands-on experience with mTLS and service-to-service authentication through service meshes, proxies, or CNI-level encryption.
- Experience using Terraform and Helm or equivalents through merge requests and CI across multiple repositories.
- Ability to write tooling and automation in Go, Python, or Bash and investigate using packet captures, flow logs, and system-level data.
- Working knowledge of PCI DSS network requirements, including segmentation, cardholder-data-environment scoping, and segmentation testing.
- Current practical use of AI tooling and demonstrated opinions about its application in engineering.
- Preferred experience with Cilium, eBPF, Hubble, mTLS at fleet scale, certificate lifecycle management, Istio, Linkerd, Cilium service mesh, SPIFFE/SPIRE, ZTNA, identity-aware proxies, OPA/Gatekeeper, Kyverno, conftest, IDS/IPS, network detection, incident containment, SOC 2, FFIEC-style expectations, or regulated fintech and payments environments.
Benefits
- Full-time remote position.
- Compensation is listed as $5,000–$9,500 USD per month, gross, based on experience.
- Participation in an on-call rotation for owned controls.
Tech Stack
AWSBashElasticsearchGitGoHelmIstioKubernetesMySQLPostgreSQLPythonReactReact NativeTerraformTypeScript
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.