Network Security Engineer

Kargo; Oregon; Hybrid; USD 200,000 - 250,000; Full time

Job summary

Kargo, a freight tech company in Oregon, seeks a senior security architect/engineer to design and implement secure network architectures across cloud, on-premise, and edge/IoT environments. You will drive security operations, vulnerability management, and governance while partnering with Engineering to secure deployments and scale secure systems for logistics.

Ideal candidates have 5+ years in related roles, strong TCP/IP, VPN, firewall experience, and cloud platform knowledge.

Qualifications

• Bachelor's degree or higher in a related technical field.
• 5+ years in network security, cybersecurity engineering, or infrastructure security.
• Hands-on with firewalls, endpoint protection, and vulnerability management tools.

Responsibilities

• Design and implement secure network architectures across cloud, on-premise, and edge/IoT environments.
• Monitor network activity and security alerts; lead containment and post-incident reviews.
• Oversee vulnerability assessments and risk reduction; maintain security hardening standards.
• Secure cloud infrastructure and identity/access controls; embed security into deployments.
• Architect secure, low-latency remote access and mesh VPN solutions for fleet/edge environments.
• Develop security policies, standards, and documentation; provide guidance to internal teams.

Skills

Network security

Cybersecurity engineering

Infrastructure security

Cloud security

Edge/IoT security

Threat detection

Incident response

Education

Bachelor's degree in CS/Cybersecurity/Info Security/Engineering

Tools

Firewalls

VPNs

NAC

Cloud platforms (AWS, GCP)

WireGuard/Tailscale

Job description

At Kargo, our mission is to build a connective tissue between the physical world of freight and the digital ecosystem used to manage it. We believe that advancements in smart infrastructure are critical to enabling a safer and more efficient future for logistics. Our loading dock sensor platform verifies all incoming and outgoing freight, aggregating data that enables shippers and carriers to efficiently manage dock operations, switch out suppliers and understand material flow in real time. We care deeply about delivering the best solutions for our customers. As a member of the Kargo team, you will have the opportunity to develop and deploy tomorrow's hardware & software solutions and help revolutionize logistics.

Responsibilities

Network Security Architecture & Engineering

• Design and implement secure network architectures across cloud, on-premise, and edge/IoT environments.
• Configure and maintain firewalls, VPNs, network segmentation, NAC, and secure remote access solutions.
• Evaluate and deploy new security technologies and controls.

Security Operations & Incident Response

• Monitor network activity and security alerts.
• Investigate suspicious activity, security events, and potential breaches.
• Lead containment, remediation, and post-incident reviews.

Vulnerability Management & Risk Reduction

• Oversee vulnerability assessments, penetration testing, and security reviews.
• Prioritize and remediate identified risks and security gaps.
• Maintain security hardening standards and best practices.

Cloud & Infrastructure Security

• Secure cloud infrastructure, network connectivity, and identity/access controls.
• Partner with Infrastructure and Engineering teams to embed security into deployments and operations.
• Support secure scaling of systems, services, and environments.

IoT/Edge Networking/Security

• Implement zero-touch provisioning and secure identity management for edge hardware to ensure fleet integrity.
• Architect secure, low-latency remote access and mesh VPN solutions for intra-fleet communication, field support and fleet maintenance.
• Work with customers for networking integration.

Governance, Compliance & Security Enablement

• Support compliance initiatives (SOC 2, ISO 27001, NIST, etc.).
• Develop security policies, standards, and documentation.
• Provide security guidance and training to internal teams.

Experience

• 5+ years of experience in network security, cybersecurity engineering, or infrastructure security roles.
• Strong knowledge of networking protocols and technologies including TCP/IP, DNS, DHCP, VPN, routing, and switching.
• Hands-on experience with security technologies such as firewalls, endpoint protection, and vulnerability management tools.
• Experience securing cloud environments such as AWS or Google Cloud Platform.
• Bachelor's degree in Computer Science, Cybersecurity, Information Security, Computer Engineering, or a related technical field.

Bonus Qualifications

• Hands-on experience with software defined mesh VPN systems like WireGuards, Tailscale, etc.
• Familiarity with security frameworks and compliance standards such as SOC 2.
• Strong incident response, threat detection, and security troubleshooting skills.
• Relevant certifications such as CISSP, CCNP Security, Security+, GSEC, or equivalent.

Pay Range$200,000—$250,000 USD

Kargo is an equal opportunity/affirmative action employer committed to an inclusive and diverse workplace. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other basis prohibited by law. We also consider qualified applicants with criminal histories consistent with applicable federal, state and local law.