# Network Security Engineer

**Company:** [Zoox](https://hotfix.jobs/companies/zoox)
**Location:** Foster City, CA
**Role:** Security Engineering
**Salary:** $181k – $218k/yr
**Experience:** 6+ years
**Skills:** Palo Alto Networks, Fortinet, Terraform, Python, AWS, GCP, Ztna, Vpn, Nac, 802.1X, Pki, SIEM, Ids/Ips, Nist 800-53, ISO 27001
**Posted:** 2026-07-14

> Network Security Engineer designing, implementing, and operating secure hybrid/multi-cloud network architectures, next-gen firewalls, ZTNA/VPN, and automation (Terraform/Python) across enterprise, OT, and cloud environments (AWS/GCP). Requires 6+ years experience in network security, firewalls, cloud security, IaC, and compliance (NIST, ISO).

## Job Description

## Responsibilities
- Design, implement, and maintain secure hybrid/multi-cloud network architectures (AWS/GCP, CloudWAN); enforce zero-trust access controls and network segmentation across corporate, data center, lab, and edge environments; develop and maintain related policies, standards, and architecture diagrams.
- Own and operate next-generation firewall platforms (Palo Alto Networks, Fortinet), managing policy architecture, segmentation, NAT, URL filtering, SSL/TLS decryption, and threat prevention tuning.
- Architect, operate, and own the lifecycle of secure remote access solutions (VPN, ZTNA, site-to-site tunnels), ensuring high availability, certificate-based authentication, and integration with identity providers (SAML, Entra ID).
- Drive automation and Infrastructure-as-Code (IaC) using Terraform, Python, CI/CD, and REST APIs for configuration management, firewall policies, and security baselines; integrate LLM-based tools to streamline operational tasks and reduce manual toil.
- Oversee security operations including 24/7 network security monitoring, traffic analysis, threat detection, vulnerability assessments, and remediation; support compliance requirements by conducting security reviews for new projects and infrastructure changes.
- Drive 802.1X/certificate-based Network Access Control (NAC) initiatives across wired and wireless environments.
- Collaborate with team members and contribute to cross-functional security initiatives with Product Security, SRE, IT, and Software Engineering teams.

## Requirements
- 6+ years of network security engineering experience securing enterprise, cloud, and OT/lab environments.
- Deep, hands-on expertise in next-gen firewalls (Palo Alto, Fortinet), AWS NFW, WAFs, IDS/IPS, NAC/802.1X, PKI, VPN, and ZTNA solutions (Zscaler, Netskope, Prisma Access, or equivalent).
- Strong understanding of core network protocols (TCP/IP, BGP, OSPF, VLAN, 802.1X, TLS/PKI) and cloud networking security principles (AWS, GCP, or Azure).
- Hands-on experience with IaC and automation tooling including Terraform, Python, CI/CD pipelines, and REST APIs.
- Experience with network security monitoring, threat detection, and security operations tooling (SIEM, IDS/IPS, vulnerability management platforms), including integration with network controls.
- Proven experience supporting major compliance initiatives (NIST 800-53, CSF 2.0, ISO 27001), including control implementation and evidence collection.

## Nice-to-Haves
- Experience in autonomous vehicle, robotics, IT/OT or automotive environments.
- Certifications: PCNSE, AWS Security Specialty, CCNA.
- Experience experimenting with or deploying AI/ML-based security capabilities (e.g., anomaly detection, behavioral analytics, LLM-driven copilots) in network or cloud security workflows.

## Similar roles

- [Senior Offensive Security Engineer](https://hotfix.jobs/jobs/e0c7d245-1099-4c20-86c2-6e47b05b00f2) - Chime - San Francisco, CA - $181k – $250k/yr
- [Senior GRC Engineer](https://hotfix.jobs/jobs/bfcb5755-185d-4c09-bda1-9f49a4ecb6c8) - Postman - San Francisco, CA - $180k – $200k/yr
- [Senior Application Security Engineer](https://hotfix.jobs/jobs/79016b33-ba89-41bf-b2dc-def7958e241d) - Monarch - Remote - $180k – $215k/yr
- [Senior Security Engineer, GRC](https://hotfix.jobs/jobs/8a3040c3-16a4-42c0-8c91-cbee4a8039b3) - Temporal - Remote - $180k – $225k/yr
- [Senior Security Engineer](https://hotfix.jobs/jobs/48ed30bc-1b7a-42a6-9225-139997bf3b3b) - Kaizen Labs - New York, NY - $180k – $220k/yr

**Apply:** https://hotfix.jobs/jobs/39366c71-c790-48b1-9a61-d52f71b06aed
**Canonical:** https://hotfix.jobs/jobs/39366c71-c790-48b1-9a61-d52f71b06aed