Senior Network & Edge Security Engineer

About the role

We are looking for a Senior Network & Edge Security Engineer to design, operate and evolve dLocal’s global cloud and hybrid network perimeter. The role blends deep cloud networking expertise with a strong security mindset to ensure secure, low‑latency connectivity for our fast‑growing payment platform.

Key responsibilities

• Design, implement and operate secure, resilient, and scalable network solutions across cloud and hybrid environments, focusing on availability, latency and disaster recovery.
• Own and continuously improve the edge‑security stack, including cloud WAFs, network firewalls, proxies, load balancers and traffic‑routing policies.
• Define, tune and maintain WAF and firewall rules, reducing noise while protecting against attacks.
• Design and manage AWS networking services such as VPCs, subnets, route tables, Transit Gateway, VPC peering, Route 53, load balancers, security groups, Network ACLs and AWS Network Firewall.
• Coordinate and support third‑party connectivity (IPsec/SSL VPNs, leased lines, partner interconnections, DNS and failover paths).
• Manage FortiGate services, including VPNs, security policies, NAT, routing and log analysis.
• Build end‑to‑end observability (logs, metrics, dashboards, alerts, synthetic checks, traffic analysis) to detect performance issues and security events.
• Drive infrastructure‑as‑code using Terraform, integrating changes into CI/CD pipelines for repeatable, auditable deployments.
• Automate network and edge‑security workflows such as site onboarding and decommissioning.

Required profile

• Strong security mindset with deep cloud networking expertise.
• Experience working with cross‑functional teams (Platform, Information Security, Compliance, Product).
• Ability to design solutions that are secure, highly available and low‑latency.

Required skills

• AWS (VPC, Subnets, Route Tables, Transit Gateway, VPC Peering, Route 53, Load Balancers, Security Groups, Network ACLs, AWS Network Firewall)
• FortiGate (IPsec VPN, SSL VPN, security policies, NAT, routing, log analysis)
• Terraform or similar IaC tools
• CI/CD pipeline integration
• Network observability (logs, metrics, dashboards, alerts, synthetic checks, traffic analysis)