Hands-On Network Security Engineer - NGFW & 802.1X

Artifintech; Foster City (CA); On-site; USD 140,000 - 190,000; Full time

Job summary

Zoox is seeking a hands-on Network Security Engineer to join our security operations and admin team in Foster City. This role focuses on deploying and tuning next‑gen NGFW/UTM platforms, implementing 802.1X NAC, VPN access, and TLS inspection in production.

You will manage rule lifecycles, update signatures, maintain runbooks and diagrams, and work on scoped security projects with clear SOWs and deadlines. Strong OSI knowledge and experience across security layers are essential, with a proven

Qualifications

• 5+ years of network security engineering in production environments.
• 5+ years IT systems or application engineering and administration.
• Strong knowledge of all OSI layers.
• Hands-on Layer-7 protection: TLS inspection, URL/DNS filtering, IPS.
• Experience with 802.1X wired and wireless NAC.
• Experience with enterprise remote access VPN.
• Experience with change management processes.
• Clear written and verbal communication across teams.

Responsibilities

• Administer next-gen firewall/UTM platforms: policy changes, rule lifecycle and cleanup.
• Operate URL filtering and Layer-7 inspection policies, tuning & exceptions.
• IDS/IPS tuning: signatures, false positives, escalation to SOC.
• Support 802.1X NAC; troubleshoot certificates, policies, onboarding.
• Support remote access VPN: client issues, split-tunnel policies, uptime.
• Handle ticket queue with SLA-compliant written updates.
• Maintain runbooks, network diagrams, and configuration docs.
• Contribute to scoped projects with SOWs and deadlines.

Skills

Network security engineering

IT systems administration

OSI model knowledge

Layer-7 protection

NGFW/UTM administration

802.1X NAC

VPN administration

Technical documentation

Tools

NGFW/UTM platforms

Job description

Zoox is seeking a hands-on Network Security Engineer to join our security operations and admin team in Foster City. This role focuses on deploying and tuning next‑gen NGFW/UTM platforms, implementing 802.1X NAC, VPN access, and TLS inspection in production.

You will manage rule lifecycles, update signatures, maintain runbooks and diagrams, and work on scoped security projects with clear SOWs and deadlines. Strong OSI knowledge and experience across security layers are essential, with a proven