7 hours ago
Bogotá, ColombiaSenior
Responsibilities
- Own default-deny east-west segmentation and network policies across Kubernetes clusters.
- Design and roll out mTLS and identity-aware service-to-service transport.
- Maintain a continuously reconciled map of VPC peerings, tunnels, cross-account links, and public entry points.
- Enforce segmentation for production and cardholder-data environments and conduct segmentation testing.
- Evaluate and help deliver per-application Zero Trust Network Access for production access.
- Own east-west and north-south flow telemetry and integrate it with the SIEM.
- Manage cluster admission controls, security groups, firewall rules, infrastructure-as-code, and automated drift remediation.
- Build rapid workload and segment containment capabilities and participate in incident response.
- Contribute to threat modeling, traffic-flow design reviews, and on-call coverage.
Requirements
- 6+ years of experience in security, network, platform, or infrastructure engineering with hands-on cloud production network-control ownership.
- Deep Kubernetes networking knowledge, including CNI, NetworkPolicy, DNS, ingress, and egress, with experience deploying segmentation on live clusters.
- Strong AWS networking experience with VPCs, subnets, security groups, peering, Transit Gateway, PrivateLink, load balancers, and flow logs.
- Hands-on experience with mTLS and service-to-service authentication through service meshes, proxies, or CNI-level encryption.
- Experience using Terraform and Helm or equivalent infrastructure-as-code tools through merge requests and CI.
- Ability to write production tooling and automation in Go, Python, or Bash.
- Ability to investigate using packet captures, flow logs, and system-level data.
- Working knowledge of PCI DSS network requirements, including segmentation, cardholder-data-environment scoping, and segmentation testing.
- Current practical use of AI tooling or custom LLM integrations for engineering workflows.
- Preferred experience with Cilium, eBPF, Hubble, Istio, Linkerd, Cilium service mesh, SPIFFE/SPIRE, ZTNA, identity-aware proxies, OPA/Gatekeeper, Kyverno, conftest, IDS/IPS, lateral-movement detection, containment, SOC 2, FFIEC expectations, or regulated fintech and payments environments.
Benefits
- Full-time remote role.
- Gross salary of $5,000–$9,500 USD per month, based on experience.
- Participation in an on-call rotation for owned controls.
Tech Stack
AWSBashElasticsearchGitGoHelmIstioKubernetesMySQLPostgreSQLPythonReactReact NativeTerraformTypeScript
Categories
About Sezzle
Sezzle builds a buy now, pay later platform that lets consumers split purchases into interest-free installments online and in stores, integrated with e-commerce and retail merchants. The company earns revenue from merchant fees and related consumer charges and provides underwriting and payment processing services. Founded in 2016 and headquartered in Minneapolis, Sezzle is a public company dual-listed on Nasdaq and the ASX.