Lead Network Security Engineer - Zero-Trust for HPC & AI Compute

The Consensus; San Jose (CA); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Medical, dental, and vision packages

Waiver credit $500/month for medical

Housing subsidy $2k/month near office

Relocation support to San Jose (Sant/“

Wellness benefits

Daily lunch and dinner in our office

Unlimited compute budget

Job summary

Etched is building a secure, scalable network for a high-value compute environment supporting frontier AI. You will own end-to-end network security design, implementing zero-trust architecture across on‑prem datacenters, multiple offices, and multi-cloud platforms.

You’ll harden networks, enforce least-privilege access, and build detection and response capabilities for sensitive chip design environments. This senior role requires hands-on engineering with strong Linux fundamentals and a proven

Qualifications

• Deep, broad networking expertise across on‑prem and multi‑cloud environments.
• Hands-on Fortinet ecosystem experience including FortiGate and FortiSASE.
• Code-driven security engineering with automation and IaC.
• Experience securing high-value compute environments (datacenters, HPC).
• Integrated EDR/XDR, MDM/MAM, SASE, CASB into unified controls.
• ZTNA-based access models for on-site, remote, and traveling users.

Responsibilities

• Design and implement a zero-trust network architecture across on-prem, offices, and multi-cloud.
• Define and enforce network segmentation isolating ASIC development workflows.
• Deploy and tune NDR, IDS/IPS and firewalls; automate rule management.
• Integrate EDR/XDR, MDM/MAM, SASE, CASB to enforce unified DLP and access.
• Own vulnerability management for network-layer exposure with infra engineers.
• Lead incident response for network security events and post-incident hardening.
• Collaborate with legal/compliance for regulatory reviews.
• Architect network segmentation for HPC clusters and CI pipelines.
• Deploy ZTNA-based corporate network with zero VPN sprawl.
• Design scalable NDR pipeline ingesting flow data and feeding SIEM.
• Develop runbooks and automated playbooks for incidents.
• Containerize IP and enforce conditional access with IT.

Skills

Networking

Fortinet

Arista EOS

Automation

ZTNA

Linux

Security monitoring

Communication

Tools

Fortinet

Arista EOS

eBPF

SASE tooling

Job description

Etched is building a secure, scalable network for a high-value compute environment supporting frontier AI. You will own end-to-end network security design, implementing zero-trust architecture across on‑prem datacenters, multiple offices, and multi-cloud platforms.

You’ll harden networks, enforce least-privilege access, and build detection and response capabilities for sensitive chip design environments. This senior role requires hands-on engineering with strong Linux fundamentals and a proven