Enterprise VPN & Zero-Trust Network Engineer

InvestedintheMission; Bastrop (TX); On-site; USD 150,000 - 190,000; Full time

Job summary

SpaceX is seeking a Sr. Network Security Engineer to design, deploy, and secure enterprise remote access VPN solutions with emphasis on Tailscale and WireGuard.

You will own the full lifecycle of remote access infrastructure, configure clients across platforms, and develop automation for policy enforcement and monitoring. The role requires deep networking expertise, strong Linux background, and experience with CI/CD tooling.

Qualifications

• Bachelor’s degree in a STEM field with 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree.
• 3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.

Responsibilities

• Provide subject matter expertise on network security, firewalls, zero-trust architectures, and industry best practices, with primary focus on modern remote access VPN technologies.
• Architect, design, deploy, and secure enterprise remote access VPN solutions end-to-end (including supporting components such as routers, exit nodes, and connectors), with strong emphasis on Tailscale, WireGuard, IPsec, and SSL-based implementations.
• Own the full lifecycle of remote access infrastructure from design to ongoing management, policy definition, client distribution, and performance optimization.
• Configure, deploy, and support VPN clients across Windows, macOS, Linux, iOS, Android.
• Manage Linux-based infrastructure and network security systems with end-to-end ownership of configuration and tooling.
• Develop automation and CI/CD workflows (Python or similar) to streamline deployment, policy enforcement, monitoring, and maintenance.
• Implement and support zero-trust remote access architectures; manage firewall policies and security appliances with tight VPN integration.
• Collaborate with engineering and operations to gather requirements, design secure solutions, and communicate best practices.
• Monitor VPN performance, logs, and security posture; drive resolutions and formalize change-management processes.
• Apply system patches and perform maintenance to improve reliability and security.

Skills

Network security

Remote access VPN

Tailscale

WireGuard

Linux administration

Python scripting

Go

CI/CD

Zero-trust architectures

Education

Bachelor’s degree in STEM

8+ years experience in lieu of a degree

Tools

Python

Go

Linux

CI/CD tooling

Job description

SpaceX is seeking a Sr. Network Security Engineer to design, deploy, and secure enterprise remote access VPN solutions with emphasis on Tailscale and WireGuard.

You will own the full lifecycle of remote access infrastructure, configure clients across platforms, and develop automation for policy enforcement and monitoring. The role requires deep networking expertise, strong Linux background, and experience with CI/CD tooling.