Network Security Engineer

Google Inc.; Austin (TX); On-site; USD 133,000 - 195,000; Full time

Job summary

GFiber is seeking a Network Security Engineer to design, deploy, and harden edge defenses and core routing infrastructure for a large-scale ISP network. You will automate security workflows and collaborate with cross-functional teams to embed security into designs.

The role requires 5+ years in security engineering and hands-on experience with BGP, firewalls, ACLs, and IaC tools like Terraform and Ansible. Strong scripting skills (Python/Go) are essential.

Qualifications

• Bachelor's degree in a technical field or equivalent practical experience.
• 5+ years in security engineering, network security, or infrastructure security.
• Experience with network security fundamentals (BGP, Firewalls, ACLs) and analyzing high-volume traffic.
• Proficiency with Infrastructure as Code and scripting (Python/Go) for automation.

Responsibilities

• Architect, deploy, and harden edge defenses and core routing infrastructure to mitigate large-scale attacks.
• Drive execution of network security targets across physical, virtual, and cloud footprints.
• Automate network security workflows, configurations, and alerting pipelines using Python or Go.
• Provide security expertise during cross-functional infrastructure reviews with Network Engineering.
• Identify and implement improvements to the network security posture in collaboration with leads.

Skills

Python

Go

BGP

Firewalls

ACLs

Terraform

Ansible

Education

Bachelor's degree in a technical field or equivalent

Tools

Terraform

Ansible

Job description

At GFiber, we believe that great internet has the power to drive innovation, strengthen communities, enable the impossible, and do all the everyday things that make all of our world go round. And the job of creating better internet is never done - so we’re growing! Our team is committed to building a place where people who want to make a difference can grow their careers and find their spot to belong.

GFiber is an Alphabet company that brings Google Fiber and Google Fiber Webpass internet services to homes and businesses across the United States. Our teams are expanding as we connect more cities and people to exceptional internet.

The application window will be open until at least August 9th, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.

This role is not eligible for immigration sponsorship.

Role Description

We are seeking a Network Security Engineer to help execute and scale GFiber's network defenses. In this role, you will be responsible for delivering clear network security objectives and contributing to complex infrastructure projects. This is an opportunity to work hands-on with large-scale ISP routing security, internet-facing protocols, and boundary defenses.

You will make sound technical decisions with minimal guidance, using code to automate defenses and strengthen our overall posture. This role demands technical accuracy, a strong collaborative mindset, and the ability to provide clear security expertise to cross‑functional engineering teams in service of GFiber's mission.

In this role, you’ll:

• Contribute to the architecture, deployment, and hardening of edge defenses and core routing infrastructure to mitigate large-scale attacks and safeguard GFiber's network boundaries.
• Drive execution on network security targets, making independent, sound decisions to secure our physical, virtual, and cloud network footprints.
• Automate network security workflows, configurations, and alerting pipelines using Python or Go to increase efficiency and eliminate manual friction.
• Provide advice and network security expertise during cross‑functional infrastructure reviews, partnering with Network Engineering to embed security into their designs from the start.
• Identify areas of improvement across our network posture, proactively initiating changes and collaborating with leads and peers to execute them.

At a minimum, we would like you to have:

• Bachelor's degree in a technical field (e.g., Computer Science, Network Engineering) or equivalent practical experience.
• 5 years of direct experience in a security engineering, network security, or infrastructure security role.
• Experience with network security fundamentals (e.g., BGP, Firewalls, ACLs), analyzing high-volume traffic patterns, and mitigating external network threats.
• Direct experience with Infrastructure as Code (e.g., Terraform, Ansible) and scripting languages (e.g., Python, Go) for network automation or security tooling.

It’s preferred if you have:

• Experience working within an Internet Service Provider (ISP), telecom, or large‑scale data center network environment.
• Familiarity with securing cloud networking architectures and production workloads in public cloud environments (e.g., GCP, AWS).
• A track record of identifying business or operational improvements and successfully collaborating with cross‑functional partners to implement changes.
• Strong communication skills, with a focus on creating transparency and translating complex network threats into clear, actionable recommendations for others.
• Broad knowledge of supporting security domains, such as basic identity protocols (SSO, SAML) or Linux system hardening, to ensure a holistic approach when designing network defenses.
• Demonstrated alignment with GFiber values, showing a desire to learn from setbacks, share information openly, and help the team succeed.

The US base salary range for this full‑time position is between $132,800 - $194,500 + bonus + benefits. As pay varies by location, your recruiter will share more about the specific salary range for your targeted location during the hiring process.

It's important to us to create an accessible, inclusive workplace for everyone. If you have a need that requires accommodation, please let us know by completing our accommodations for applicants form . Our candidate accommodations team will then connect with you to confidentially discuss your options.