Senior Security Engineer, Network & Zero Trust
Core
Own the network pillar of Sezzle's zero-trust program, implementing default-deny micro-segmentation, identity-aware service-to-service transport, and network telemetry across Kubernetes clusters and AWS.
Role type
Senior IC security engineer (network & zero trust)
Builds
Network policies, mTLS service-to-service connections, network telemetry pipelines, and AI-assisted segmentation workflows.
Domain
Fintech / Retail / Cloud Security
Required skills
Kubernetes networking, AWS networking, mTLS, Infrastructure as Code, Go/Python/Bash, AI-assisted engineering, PCI DSS knowledge
Preferred skills
Cilium/eBPF, Service Mesh (Istio/Linkerd), SPIFFE/SPIRE, ZTNA, Policy-as-code (OPA/Gatekeeper), SOC 2/FFIEC experience
Technologies
Kubernetes, AWS, Terraform, Helm, Go, Python, Bash, Cilium, Istio, Linkerd, OPA, Gatekeeper, Kyverno
Responsibilities
Design and enforce east-west segmentation across Kubernetes clusters; Implement mutually authenticated service-to-service connections (mTLS); Maintain live network maps via cloud APIs; Enforce CDE boundaries and segmentation testing; Partner on ZTNA for private access; Own network telemetry and flow logs; Manage cluster admission control and drift detection; Participate in incident response and threat modeling.
Seniority
Senior, hands-on IC
