Network Security Engineer

Cloud Analytics Technologies, LLC; Foster City (CA); Sur place; USD 140 000 - 200 000; Plein temps

Résumé du poste

Zoox Information Security is seeking a hands-on Network Security Engineer to join our security operations. You will administer NGFW/UTM, manage 802.1X NAC deployments, and tune TLS inspection and URL filtering in production environments.

You will handle VPN troubleshooting, maintain runbooks and diagrams, and work on scoped projects with clear SOWs and milestones. Strong OSI knowledge and experience in change management are essential.

Qualifications

• 5+ years of network security engineering in production environments.
• 5+ years IT systems or application engineering/administration.
• Strong knowledge of OSI model layers.
• Hands-on with Layer-7 protection techniques (TLS inspection, IPS, URL and DNS filtering).
• Experience administering enterprise NGFW/UTM platforms.
• Experience with 802.1X wired/wireless NAC.
• Experience with enterprise remote access VPN.
• Experience operating within change management.

Responsabilités

• Administer next-gen firewall/UTM platforms: policy changes and updates.
• Operate URL filtering and Layer-7 inspection policies.
• Tune IDS/IPS: reduce false positives; escalate detections.
• Support 802.1X NAC deployment and troubleshooting.
• Support remote access VPN: client troubleshooting and policy changes.
• Manage ticket queue with SLA updates.
• Maintain runbooks and network diagrams and documentation.
• Handle scoped project work with written SOW and milestones.

Connaissances

Network security engineering

IT systems administration

OSI model proficiency

Layer-7 protection techniques

Change management experience

Formation

Certifications: PCNSE, Security+, CISSP

Outils

NGFW/UTM platforms

802.1X NAC

VPN

Description du poste

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Role Description:

This is a hands-on engineering and administration role, not an advisory one.

Day-to-day operations :

• Administer next-gen firewall / UTM platforms: policy changes, rule lifecycle and cleanup, software and signature updates, certificate renewals.
• Operate URL filtering and Layer-7 inspection policies, including category tuning and exception handling
• IDS/IPS tuning: signature management, false positive reduction, escalation of confirmed detections to our security operations team
• Support 802.1X network access control: supplicant and authentication troubleshooting, certificate and policy issues, onboarding new device types.
• Support remote access VPN: client troubleshooting, access and split-tunnel policy changes, availability monitoring.
• Work the ticket queue to SLA with clear written updates to requesters
• Maintain runbooks, network diagrams, and configuration documentation

The contractor will also be assigned scoped project work. Anticipated projects include:

• [802.1X expansion to additional sites / device classes] — design, pilot, phased rollout, and handoff documentation
• [Network segmentation and SSL Decryption enforcement work] — policy design and enforcement

Each project will be defined with a written statement of work, acceptance criteria, and target completion date before work begins.

Required Qualifications:

• 5+ years of network security engineering supporting production environments
• 5+ years of IT systems or application engineering and administration
• Strong working knowledge of all layers of the OSI model
• Hands-on experience with Layer-7 protection techniques (application control, TLS inspection, IPS, URL and DNS filtering)
• Direct experience administering enterprise NGFW/UTM platforms [name the vendors you run]
• Experience implementing and supporting 802.1X wired and wireless NAC
• Experience with enterprise remote access VPN
• Demonstrated experience operating within a formal change management process
• Clear written and verbal communication, with the ability to work across Information Security, IT, Product, and Operations teams

Preferred :

• Relevant certifications [e.g. PCNSE, Security+, CISSP]
• IaC, scripting or automation experience for configuration and reporting [Python, Ansible, Terraform]
• Experience in a regulated or safety-critical environment
• Contractor does not set security policy or standards; those remain owned by Zoox Information Security
• Architecture decisions require Zoox review and approval; the contractor contributes design input and implementation
• No production changes outside the approved change management window
• All documentation, configurations, and scripts produced are Zoox work product

Success Measures

• Ticket SLA attainment and requester satisfaction
• Change success rate and absence of change-caused incidents
• Project milestones delivered on agreed dates
• Completeness and accuracy of documentation at handoff

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.

Some of our Business Ventures - Knowledge Analytics

Do restrictive necessities, your capability for advanced analytics or your business model need custom-made applications and infrastructure configurations? opt for our hosted managed services to urge comprehensive analytics solutions supported industry-leading Cloud Analytics Technologies, LLC code - delivered by the Cloud Analytics Technologies, LLC consultants UN agency understand these solutions best. Through a mix of with-it technology and dedicated service and support, Cloud Analytics Technologies, LLC hosted managed services will facilitate you: