# Senior/Staff Network Security Engineer

**Company:** [Zoox](https://hotfix.jobs/companies/zoox)
**Location:** Foster City, CA
**Role:** Security Engineering
**Salary:** $190k – $228k/yr
**Experience:** 8+ years
**Skills:** Palo Alto Networks, Fortinet, AWS, GCP, Terraform, Python, CI/CD, REST APIs, Vpn, Ztna, SAML, Entra Id, Nist 800-53, ISO 27001
**Posted:** 2026-06-03

> As a Senior/Staff Network Security Engineer, you will design, implement, and operate security controls across Zoox's enterprise, OT networks, and cloud infrastructure. This role involves securing hybrid/multi-cloud architectures, managing firewall platforms, and driving automation with IaC.

## Job Description

## In This Role, You Will...

* Design, implement, and maintain secure hybrid/multi-cloud network architectures (AWS/GCP, CloudWAN, SD-WAN); enforce zero-trust access controls and network segmentation across corporate, data center, lab, and edge environments; develop and maintain related policies, standards, and architecture diagrams
* Own and operate next-generation firewall platforms (Palo Alto Networks, Fortinet), managing policy architecture, segmentation, NAT, URL filtering, SSL/TLS decryption, and threat prevention tuning
* Architect, operate, and own the lifecycle of secure remote access solutions (VPN, ZTNA, GlobalProtect, site-to-site tunnels), ensuring high availability, certificate-based authentication, and integration with identity providers (SAML, Entra ID)
* Drive automation and Infrastructure-as-Code (IaC) using Terraform, Python, CI/CD, and REST APIs for configuration management, firewall policies, and security baselines; integrate LLM-based tools to streamline operational tasks and reduce manual toil
* Oversee security operations including 24/7 network security monitoring, traffic analysis, threat detection, vulnerability assessments, and remediation; support compliance requirements by conducting security reviews for new projects and infrastructure changes
* Lead 802.1X/certificate-based Network Access Control (NAC) initiatives across wired and wireless environments
* Define team roadmap, mentor engineers, and lead cross-functional security initiatives with Product Security, SRE, IT, and Software Engineering teams

## Qualifications

* **Experience:** 8+ years of network security engineering experience securing enterprise, cloud, and OT/lab environments
* **Platform Expertise:** Deep, hands-on expertise in next-gen firewalls (Palo Alto, Fortinet), AWS NFW, WAFs, IDS/IPS, NAC/802.1X, PKI, VPN, and ZTNA solutions (Zscaler, Prisma Access, or equivalent)
* **Technical Knowledge:** Strong understanding of core network protocols (TCP/IP, BGP, OSPF, VLAN, 802.1X, TLS/PKI) and cloud networking security principles (AWS, GCP, or Azure)
* **Automation:** Hands-on experience with IaC and automation tooling including Terraform, Python, CI/CD pipelines, and REST APIs
* **Security Operations:** Experience with network security monitoring, threat detection, and security operations tooling (SIEM, IDS/IPS, Zeek, Suricata, vulnerability management platforms), including integration with network controls
* **Compliance:** Proven experience supporting major compliance initiatives (NIST 800-53, CSF 2.0, ISO 27001), including control implementation and evidence collection

## Bonus Qualifications

* Experience in autonomous vehicle, robotics, or automotive environments
* **Certifications:** PCNSE, AWS Security Specialty, CCNP/CCIE Security, or CISSP
* Experience experimenting with or deploying AI/ML-based security capabilities (e.g., anomaly detection, behavioral analytics, LLM-driven copilots) in network or cloud security workflows

## Similar roles

- [Staff Software Engineer, Anti-Abuse & Security](https://hotfix.jobs/jobs/1fcb0c05-c653-435e-afc9-ba434b2ce4eb) - Replit - Foster City, CA - $190k – $240k/yr
- [Staff Software Engineer - IAM](https://hotfix.jobs/jobs/beb0c7dd-8252-4afd-9578-b2f442a56ef6) - Databricks - Mountain View, CA - $191k – $275k/yr
- [Staff Software Engineer - Security Infrastructure](https://hotfix.jobs/jobs/aba44157-0500-410c-86d5-7093521c7cdc) - Databricks - Mountain View, CA - $191k – $254k/yr
- [Staff Product Security Engineer](https://hotfix.jobs/jobs/95a8b221-1433-4ef3-9649-0377b8046821) - Rippling - Seattle, WA - $189k – $315k/yr
- [Staff Engineer, Cloud Security](https://hotfix.jobs/jobs/99669566-c101-41a5-be5e-7cf047fbf291) - Illumio - Sunnyvale, CA - $194k – $233k/yr

**Apply:** https://hotfix.jobs/jobs/7e8c4605-3112-4e43-9bf5-867803cdb64d
**Canonical:** https://hotfix.jobs/jobs/7e8c4605-3112-4e43-9bf5-867803cdb64d