SSH consists of three different protocols (see RFC 4251):
- The Transport Layer Protocol,
- The User Authentication Protocol,
- The Connection Protocol.
If you want to use the OSI model, then the different protocols operate at different layers, somewhere between layer 4 and layer 7.
So, the following quote you've asked about isn't wrong, just a bit imprecise.
IPSec works at Layer 3 of the OSI model, while SSH functions at Layers 4 and 5.