Network Security Engineer

US CITIZENS ONLY
Hybrid 3 Days a week onsite.

Position Overview

We are seeking two experienced Network Security Engineers to support Zoox's Information Security team. This is a hands-on engineering and administration role focused on maintaining, securing, and improving enterprise network security systems.

The engineers will be responsible for day-to-day network security operations, troubleshooting, firewall administration, network access controls, and supporting security infrastructure projects.

This position requires someone who is comfortable working directly with security technologies, resolving technical issues, implementing approved changes, and maintaining production environments.

The selected candidates will work under the direction of Zoox's Information Security team and follow established change management processes.

Key Responsibilities

Network Security Operations & Administration

• Administer and maintain next-generation firewall (NGFW) and Unified Threat Management (UTM) platforms.

• Manage firewall policies, security rules, rule lifecycle management, and cleanup activities.

• Perform software updates, security signature updates, and certificate renewals.

• Configure and maintain URL filtering and Layer 7 application inspection policies.

• Manage URL category tuning, application controls, and security policy exceptions.

• Monitor and tune Intrusion Detection and Prevention Systems (IDS/IPS), including signature management and false-positive reduction.

• Investigate and escalate confirmed security detections to the Security Operations team.

• Support and troubleshoot 802.1X wired and wireless Network Access Control (NAC) environments.

• Resolve authentication, supplicant, certificate, and network access policy issues.

• Assist with onboarding new devices and device types into NAC environments.

• Administer and troubleshoot enterprise remote access VPN solutions.

• Manage VPN client connectivity, access policies, split-tunneling configurations, and availability monitoring.

• Respond to service tickets within established SLAs and provide clear updates to requesters.

• Maintain accurate technical documentation, including network diagrams, configurations, and operational runbooks.

Network Security Projects & Implementation

In addition to daily operational responsibilities, the engineers will support defined network security projects, including:

802.1X Network Access Control Expansion

• Expand 802.1X capabilities across additional sites and device types.

• Support solution design, testing, pilot deployments, and phased implementations.

• Troubleshoot deployment issues and provide documentation for operational handoff.

Network Segmentation & SSL Decryption

• Support network segmentation initiatives to improve security and access controls.

• Assist with designing and implementing segmentation policies.

• Configure and enforce SSL/TLS decryption policies.

• Validate security configurations and ensure compliance with approved security requirements.

All project work will follow documented scopes, acceptance criteria, established timelines, and approved change management procedures.

Required Qualifications

• 5+ years of experience in network security engineering supporting enterprise production environments.

• 5+ years of experience in IT systems or application engineering and administration.

• Strong understanding of all seven layers of the OSI model.

• Hands-on experience administering enterprise next-generation firewalls (NGFW) and UTM platforms.

• Strong experience with Layer 7 security technologies, including:

  • Application control

  • TLS/SSL inspection and decryption

  • Intrusion Prevention Systems (IPS)

  • URL filtering

  • DNS filtering

• Experience implementing, administering, and troubleshooting 802.1X wired and wireless Network Access Control (NAC).

• Experience supporting enterprise remote access VPN solutions.

• Knowledge of firewall security policies, rule management, network segmentation, and access controls.

• Experience troubleshooting authentication, certificates, and network connectivity issues.

• Proven experience working within formal IT change management processes.

• Strong troubleshooting, analytical, and problem-solving skills.

• Excellent written and verbal communication skills.

• Ability to collaborate effectively with Information Security, IT, Product, and Operations teams.

Preferred Qualifications

• Relevant industry certifications, such as:

  • Palo Alto Networks Certified Network Security Engineer (PCNSE)

  • CompTIA Security+

  • Certified Information Systems Security Professional (CISSP)

• Experience with infrastructure automation, scripting, or Infrastructure as Code (IaC), including:

  • Python

  • Ansible

  • Terraform

• Experience supporting network security infrastructure in regulated or safety-critical environments.

• Experience automating security configurations, reporting, and routine administrative tasks.

Security Governance & Change Management

• Follow security policies, standards, and procedures established by Zoox Information Security.

• Provide technical recommendations and implementation support while ensuring architecture decisions receive appropriate approval.

• Perform production changes only during approved change management windows.

• Maintain complete and accurate documentation for all implemented changes.

• Ensure all configurations, scripts, and technical deliverables are properly documented and transferred to Zoox.

Performance Expectations

Success in this position will be measured by:

• Meeting established service ticket SLAs and maintaining requester satisfaction.

• Successfully implementing production changes without introducing avoidable incidents.

• Delivering assigned project milestones within agreed timelines.

• Maintaining accurate and complete technical documentation.

• Supporting reliable, secure, and stable enterprise network operations.

Ideal Candidate

The ideal candidate is a hands-on Network Security Engineer who has spent several years directly managing firewalls, network access controls, VPN environments, and enterprise security infrastructure.

We are looking for someone who can troubleshoot real-world production issues, make approved configuration changes, support security deployments, and work effectively with internal technical teams.