Senior Security Engineer, Network, Zero Trust

🔥 0 minutes ago

🇹🇷 Turkey – Remote

💵 $5k - $9.5k / month

⏰ Full Time

🟠 Senior

🛜 Network Engineer / Network Administrator

👻 Ghost score 21%

infoinfo
Apply Now
Find Similar Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Logo of Sezzle

Sezzle

201 - 500 employees

Founded 2016

💳 Fintech

👥 B2C

🛍️ eCommerce

Fintech • B2C • eCommerce

Sezzle is a financial technology company that offers a "buy now, pay later" service, allowing consumers to purchase products and pay for them in four interest-free installments over six weeks. The Sezzle app provides users with a flexible financing alternative to traditional credit cards, enabling instant approval decisions without impacting credit scores. Sezzle partners with various top brands, including Amazon, Walmart, and Target, to offer in-app and in-store payment options. The company's mission is to empower consumers financially by providing more financial freedom and control. It is available as a mobile app, with millions of downloads and high user ratings, and works towards accessibility and inclusion on its platform.

📋 Description

• Own east-west segmentation across Kubernetes clusters using default-deny micro-segmentation and identity-bound paths • Design and roll out mutually authenticated, encrypted service-to-service connections using mTLS • Maintain a continuously reconciled map of VPC peerings, tunnels, cross-account links, and public entry points • Implement and enforce production and cardholder-data environment segmentation boundaries • Review network peerings and public exposure and run segmentation testing with the security team • Partner with IT to evaluate and deliver per-application zero-trust network access for production systems • Own east-west and north-south network telemetry and feed identity-aware flow data to the SIEM • Manage cluster admission control, security groups, firewall rules, infrastructure as code, drift detection, and automatic remediation • Build containment capabilities for isolating workloads or segments during lateral-movement incidents • Participate in threat modeling, traffic-flow design reviews, incident response, and on-call rotation • Write policies, tooling, and rollout automation and carry changes through other teams’ services • Report to the Director of Information Security and collaborate with security platform, detection and response, platform, IAM, and IT teams • Use and build agentic workflows for flow analysis, policy generation, and drift review

🎯 Requirements

• 6+ years of experience in security, network, platform, or infrastructure engineering • Hands-on ownership of network controls in cloud production environments • Deep practical Kubernetes networking knowledge, including CNI, NetworkPolicy semantics, DNS, ingress, and egress • Experience rolling segmentation out on live clusters without outages • Strong AWS networking knowledge: VPCs, subnets, security groups, peering, Transit Gateway, PrivateLink, load balancers, and flow logs • Hands-on experience with mTLS and service-to-service authentication • Infrastructure as code experience with Terraform and Helm or equivalents, using merge requests and CI • Ability to write code in Go, Python, or Bash for tooling and automation • Ability to investigate with packet captures, flow logs, and system-level data • Working knowledge of PCI DSS network requirements, including segmentation, cardholder-data environment scoping, and segmentation testing • Demonstrated current use of AI tooling such as Claude Code, Codex, Cursor, or custom LLM integrations • Preferred: Cilium/eBPF, Hubble or equivalent, fleet-scale mTLS and certificate lifecycle, SPIFFE/SPIRE, AI-assisted workflows, ZTNA, policy-as-code, admission control, network detection, SOC 2, FFIEC-style expectations, and regulated-industry experience

🏖️ Benefits

• Competitive gross salary of $5,000–$9,500 USD per month, based on experience • AI-assisted engineering workflows and tools • On-call participation for owned controls • Collaborative work with security platform, detection and response, platform, IAM, IT, and security teams

Apply Now