7 hours ago
Remote, IndiaSenior
Responsibilities
- Own east-west network segmentation and default-deny NetworkPolicy controls across Kubernetes clusters.
- Design and roll out identity-aware, encrypted service-to-service connections using mTLS.
- Build and continuously reconcile network maps covering VPCs, tunnels, cross-account links, peerings, and public entry points.
- Enforce segmentation for production and cardholder-data environments and conduct segmentation testing.
- Evaluate and help deliver per-application private access and ZTNA for engineers and operators.
- Own east-west and north-south network telemetry and feed flow data to the SIEM.
- Manage workload admission controls, security groups, firewall rules, infrastructure as code, and automated drift detection and remediation.
- Build containment capabilities and participate in incident response, threat modeling, design reviews, and on-call operations.
- Develop tooling, automation, policy generation, flow analysis, and drift-review workflows, including AI-assisted workflows.
Requirements
- 6+ years of experience in security, network, platform, or infrastructure engineering with hands-on ownership of cloud production network controls.
- Deep Kubernetes networking knowledge, including CNI, NetworkPolicy semantics, DNS, ingress, and egress, with experience rolling out segmentation on live clusters.
- Strong AWS networking experience with VPCs, subnets, security groups, peering, Transit Gateway, PrivateLink, load balancers, and flow logs.
- Hands-on experience with mTLS and service-to-service authentication through service meshes, proxies, or CNI-level encryption.
- Experience using Terraform and Helm or equivalent infrastructure-as-code tools through merge requests and CI.
- Ability to write production tooling and automation in Go, Python, or Bash and investigate using packet captures, flow logs, and system-level data.
- Working knowledge of PCI DSS network requirements, including segmentation, cardholder-data-environment scoping, and segmentation testing.
- Active practical use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations.
- Preferred experience with Cilium, eBPF, Hubble, Istio, Linkerd, Cilium service mesh, SPIFFE/SPIRE, ZTNA, identity-aware proxies, OPA/Gatekeeper, Kyverno, conftest, IDS/IPS, anomalous-flow detection, lateral-movement detection, SOC 2, FFIEC-style examinations, and regulated fintech or payments environments.
Benefits
- Full-time remote role.
- Monthly gross salary range of $5,000-$9,500 USD.
- Participation in an on-call rotation for owned controls.
- Opportunity to work with open-source technologies and AI-assisted engineering workflows.
Tech Stack
AWSBashElasticsearchGitGoHelmIstioKubernetesMySQLPostgreSQLPythonReactReact NativeTerraformTypeScript
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.