ph3Why should you join dLocal? /h3pdLocal enables the biggest companies in the world to collect payments in 40 countries in emerging markets. General brands rely on us to increase conversion rates and simplify payment expansion effortlessly. As both a payments processor and a merchant of record where we operate, we make it possible for our merchants to make inroads into the world’s fastest-growing, emerging markets. /ppBy joining us you will be a part of an amazing global team that makes it all happen. Being a part of dLocal means working with 1000+ teammates from 30+ different nationalities and developing an international career that impacts millions of people’s daily lives. We are builders, we never run from a challenge, we are customer-centric, and if this sounds like you, we know you will thrive in our team. /ppWe are looking for a Senior Network Edge Security Engineer to help design, operate, and evolve dLocal’s global cloud and hybrid network perimeter. This role combines deep cloud networking expertise with a strong security mindset: you will own secure connectivity, traffic protection, WAF and firewall controls, and the automation that makes those services reliable at scale. You will work closely with Platform, Information Security, Compliance, and Product teams to keep critical services secure, available, low‑latency, and ready for international growth. /ph3What you’ll do /h3ulliDesign, implement, and operate secure, resilient, and scalable network solutions across cloud and hybrid environments, with a focus on availability, latency, disaster recovery, and operational simplicity. /liliOwn and continuously improve our edge‑security stack, including cloud WAFs, network firewalls, proxies, load balancers, and traffic‑routing policies that protect public APIs, front‑ends, and internal services. /liliDefine, tune, and maintain WAF and firewall rules, policies, and traffic flows; proactively reduce noise and false positives while preserving effective protection against attacks. /liliDesign and operate AWS networking services such as VPCs, subnets, route tables, Transit Gateway, VPC peering, Route 53, load balancers, security groups, Network ACLs, and AWS Network Firewall. /liliCoordinate, implement, and support third‑party connectivity, including IPsec/SSL VPNs, leased lines, partner interconnections, routing, DNS, and failover paths. /liliManage FortiGate‑based services, including IPsec and SSL VPNs, security policies, virtual IPs/servers, NAT, routing, and log analysis. /liliBuild and maintain end‑to‑end HTTP/HTTPS and network observability using logs,



metrics, dashboards, alerting, synthetic checks, and traffic analysis to identify performance degradation, misconfigurations, and security events early. /liliDrive network and security infrastructure as code using Terraform or similar tools, integrating changes into CI/CD pipelines so they are repeatable, auditable, tested, and secure across environments. /liliAutomate network and edge‑security workflows such as site onboarding and decommissioning, rule and policy lifecycle management, partner connectivity, configuration validation, and controlled WAF‑provider failovers. /liliLead and actively participate in incident response for network, connectivity, WAF, and edge‑security events; execute DR procedures, coordinate controlled failovers, and drive postmortems and remediation actions. /liliPartner with Information Security and Compliance to ensure network and edge controls support regulatory and industry requirements, including PCI and SOX, and provide audit‑ready evidence when needed. /liliMaintain clear, actionable documentation for architectures, traffic flows, standards, operational procedures, and runbooks so other engineering teams can move quickly and safely. /li /ulh3What we need you to have /h3ulliSolid hands‑on experience designing, operating, and troubleshooting cloud networking in production environments with high availability and security requirements. /liliStrong knowledge of TCP/IP, HTTP/HTTPS, TLS, DNS, routing, NAT, load balancing, proxies, VPN/IPsec, and network troubleshooting practices. /liliPractical experience with AWS networking services, including VPC, subnets, route tables, Route 53, load balancers, Transit Gateway, VPC peering, security groups, Network ACLs, and AWS Network Firewall. /liliHands‑on experience managing WAFs and/or edge‑security controls protecting web applications and APIs; experience in multi‑provider environments is a plus. /liliExperience managing firewalls, ideally FortiGate, including VPNs, security policies, virtual IPs, routing, and log analysis. /liliExperience with Infrastructure as Code and automation tools such as Terraform, CloudFormation, Ansible, or similar,



and the ability to integrate infrastructure changes into CI/CD workflows. /liliExperience with monitoring and observability platforms such as ELK, New Relic, Coralogix, or similar; ability to build actionable dashboards and alerts for latency, errors, throughput, availability, and anomalous traffic patterns. /liliLinux administration fundamentals and practical command‑line troubleshooting skills. /liliExperience with HTTP/TCP proxies and reverse proxies, such as NGINX, HAProxy, or Squid. /liliStrong understanding of cloud‑security best practices, network segmentation, least privilege, and secure change‑management practices. /liliStrong written and spoken English, with the ability to document technical decisions and collaborate effectively across Networking, Security, Platform, Product, and external partn /li /ulh3Would be awesome if you had /h3ulliExperience with AWS, GCP, Azure, or multi‑cloud networking and security architectures. /liliExposure to PCI‑DSS, SOX, or other regulated‑industry security and compliance requirements. /liliExperience operating in high‑criticality environments such as payments, fintech, banking, or global e‑commerce, where uptime, resilience, and latency are essential. /liliExperience designing disaster‑recovery strategies, multi‑provider WAF failover, or zero‑trust network architectures. /liliAWS certifications such as AWS Certified Advanced Networking – Specialty, Solutions Architect, Security – Specialty, or DevOps Engineer. /li /ulh3What do we offer? /h3pBesides the tailored benefits we have for each country, dLocal will help you thrive and go that extra mile by offering you: /pulliFlexibility: we have flexible schedules and we are driven by performance. /liliFintech industry: work in a dynamic and ever‑evolving environment, with plenty to build and boost your creativity. /liliReferral bonus program: our internal talents are the best recruiters - refer someone ideal for a role and get rewarded. /liliSocial budget: you’ll get a monthly budget to chill out with your team (in person or remotely) and deepen your connections! /lilidLocal Houses: want to rent a house to spend one week anywhere in the world coworking with your team? We’ve got your back! /li /ulh3Flexibility in how you work: /h3pWe focus on impact and productivity over fixed hours. This means our teams have flexible schedules and, depending on your role and location, you will combine self‑managed focus time with moments of in‑person connection in our collaboration hubs. /p /p #J-18808-Ljbffr

📌 Senior Network & Edge Security Engineer (Madrid)
🏢 Tamarind Intelligence
📍 Madrid