{"id":63001,"url":"https://alion.io/job/dlocal-cloud-network-edge-security-engineer","title":"Cloud Network & Edge Security Engineer","company":{"id":6586,"name":"dLocal","domain":"dlocal.com","url":"https://alion.io/company/dlocal","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"A","score":88,"open_postings":28,"ghost_share":0,"stale_share":0.286,"repost_share":0,"time_to_fill_p50_days":136,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Madrid, Spain","Barcelona, Spain"],"countries":["ES"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":47000,"max_usd":109000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"FortiGate","optional":false},{"name":"TCP/IP","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Ansible","optional":true},{"name":"Azure","optional":true},{"name":"CloudFormation","optional":true},{"name":"GCP","optional":true},{"name":"HAProxy","optional":true},{"name":"Least Privilege","optional":true},{"name":"Linux","optional":true},{"name":"New Relic","optional":true},{"name":"Nginx","optional":true},{"name":"PCI DSS","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-07-31T08:11:03Z","employer_posted_date":"2026-07-31","last_verified_at":"2026-10-17T23:30:27Z","board_verified":true,"closed_at":null,"days_open":78,"trust":{"level":"ok","repost_count":0,"flags":[],"days_open":77},"description":"What’s the opportunity?\nWe are looking for a Senior Network & Edge Security Engineer to help design, operate, and evolve dLocal’s global cloud and hybrid network perimeter. This role combines deep cloud networking expertise with a strong security mindset: you will own secure connectivity, traffic protection, WAF and firewall controls, and the automation that makes those services reliable at scale. You will work closely with Platform, Information Security, Compliance, and Product teams to keep critical services secure, available, low-latency, and ready for international growth.\nWhat you’ll do\nDesign, implement, and operate secure, resilient, and scalable network solutions across cloud and hybrid environments, with a focus on availability, latency, disaster recovery, and operational simplicity.\n\nOwn and continuously improve our edge-security stack, including cloud WAFs, network firewalls, proxies, load balancers, and traffic-routing policies that protect public APIs, frontends, and internal services.\n\nDefine, tune, and maintain WAF and firewall rules, policies, and traffic flows; proactively reduce noise and false positives while preserving effective protection against attacks.\n\nDesign and operate AWS networking services such as VPCs, subnets, route tables, Transit Gateway, VPC peering, Route 53, load balancers, security groups, Network ACLs, and AWS Network Firewall.\n\nCoordinate, implement, and support third-party connectivity, including IPsec/SSL VPNs, leased lines, partner interconnections, routing, DNS, and failover paths.\n\nManage FortiGate-based services, including IPsec and SSL VPNs, security policies, virtual IPs/servers, NAT, routing, and log analysis.\n\nBuild and maintain end-to-end HTTP/HTTPS and network observability using logs, metrics, dashboards, alerting, synthetic checks, and traffic analysis to identify performance degradation, misconfigurations, and security events early.\n\nDrive network and security infrastructure as code using Terraform or similar tools, integrating changes into CI/CD pipelines so they are repeatable, auditable, tested, and secure across environments.\n\nAutomate network and edge-security workflows such as site onboarding and decommissioning, rule and policy lifecycle management, partner connectivity, configuration validation, and controlled WAF-provider failovers.\n\nLead and actively participate in incident response for network, connectivity, WAF, and edge-security events; execute DR procedures, coordinate controlled failovers, and drive postmortems and remediation actions.\n\nPartner with Information Security and Compliance to ensure network and edge controls support regulatory and industry requirements, including PCI and SOX, and provide audit-ready evidence when needed.\n\nMaintain clear, actionable documentation for architectures, traffic flows, standards, operational procedures, and runbooks so other engineering teams can move quickly and safely.\n\nWhat we need you to have\nSolid hands-on experience designing, operating, and troubleshooting cloud networking in production environments with high availability and security requirements.\n\nStrong knowledge of TCP/IP, HTTP/HTTPS, TLS, DNS, routing, NAT, load balancing, proxies, VPN/IPsec, and network troubleshooting practices.\n\nPractical experience with AWS networking services, including VPC, subnets, route tables, Route 53, load balancers, Transit Gateway, VPC peering, security groups, Network ACLs, and AWS Network Firewall.\n\nHands-on experience managing WAFs and/or edge-security controls protecting web applications and APIs; experience in multi-provider environments is a plus.\n\nExperience managing firewalls, ideally FortiGate, including VPNs, security policies, virtual IPs, routing, and log analysis.\n\nExperience with Infrastructure as Code and automation tools such as Terraform, CloudFormation, Ansible, or similar, and the ability to integrate infrastructure changes into CI/CD workflows.\n\nExperience with monitoring and observability platforms such as ELK, New Relic, Coralogix, or similar; ability to build actionable dashboards and alerts for latency, errors, throughput, availability, and anomalous traffic patterns.\n\nLinux administration fundamentals and practical command-line troubleshooting skills.\n\nExperience with HTTP/TCP proxies and reverse proxies, such as NGINX, HAProxy, or Squid.\n\nStrong understanding of cloud-security best practices, network segmentation, least privilege, and secure change-management practices.\n\nStrong written and spoken English, with the ability to document technical decisions and collaborate effectively across Networking, Security, Platform, Product, and external partn\n\nWould be awesome if you had\nExperience with AWS, GCP, Azure, or multi-cloud networking and security architectures.\n\nExposure to PCI-DSS, SOX, or other regulated-industry security and compliance requirements.\n\nExperience operating in high-criticality environments such as payments, fintech, banking, or global e-commerce, where uptime, resilience, and latency are essential.\n\nExperience designing disaster-recovery strategies, multi-provider WAF failover, or zero-trust network architectures.\n\nAWS certifications such as AWS Certified Advanced Networking - Specialty, Solutions Architect, Security - Specialty, or DevOps Engineer.","description_format":"text","description_chars":5287,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Spain","iso":"ES","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways","Currency Exchange & FX Payments"],"lifecycle":[{"event":"open","at":"2026-07-31T08:11:03Z"}],"visa":[],"liveness":{"score":67,"band":"ok","label":"Likely open","p_open":1,"p_active":0.931,"p_room":0.72,"age_days":77,"expected_fill_days":136,"reasons":["conf:1","urgency","win:mid","crowd:"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/dlocal-cloud-network-edge-security-engineer","json_url":"https://alion.io/job/dlocal-cloud-network-edge-security-engineer.json","meta":{"generated_at":"2026-10-17T23:31:22Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1835,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6586},"rest":"https://alion.io/mcp/rest/get_company?id=6586"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdlocal-cloud-network-edge-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdlocal-cloud-network-edge-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdlocal-cloud-network-edge-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dlocal-cloud-network-edge-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdlocal-cloud-network-edge-security-engineer"}]}