Network Security Engineer — NGFW, NAC & VPN

Ethereum Technologies; Foster City (CA); On-site; USD 103,000 - 165,000; Full time

Job summary

Zoox is seeking a contractor for hands-on network security engineering and administration. You will manage next-generation firewall/UTM platforms, implement and tune Layer-7 protections, and support 802.1X NAC and remote access VPN to maintain secure enterprise networks.

You will work under Zoox Information Security, contribute to runbooks and diagrams, and deliver scoped projects with clear acceptance criteria. Strong communication across IT, Security, and Ops is essential.

Qualifications

• 5+ years of network security engineering in production environments.
• 5+ years of IT systems or application engineering.
• Strong working knowledge of all layers of the OSI model.
• Hands-on Layer-7 protection techniques (application control, TLS inspection, IPS, URL and DNS filtering).
• Experience administering enterprise NGFW/UTM platforms.
• Experience implementing and supporting 802.1X wired and wireless NAC.
• Experience with enterprise remote access VPN.
• Demonstrated experience operating within a formal change management process.
• Clear written and verbal communication across teams.

Responsibilities

• Administer next-gen firewall/UTM platforms: policy changes, rule lifecycle, updates, and certificates.
• Operate URL filtering and Layer-7 inspection policies with tuning and exceptions.
• IDS/IPS tuning: signatures, false positives, and escalation to security operations.
• Support 802.1X NAC: onboarding devices and certificate/policy issues.
• Support remote access VPN: troubleshooting and policy changes.
• Maintain runbooks, network diagrams, and configuration documentation.
• Work on scoped projects with written SOWs and defined deadlines.

Skills

Network security engineering

IT systems engineering

OSI model knowledge

Layer-7 protection

Change management

Cross-functional communication

Tools

NGFW/UTM platforms

Job description

Zoox is seeking a contractor for hands-on network security engineering and administration. You will manage next-generation firewall/UTM platforms, implement and tune Layer-7 protections, and support 802.1X NAC and remote access VPN to maintain secure enterprise networks.

You will work under Zoox Information Security, contribute to runbooks and diagrams, and deliver scoped projects with clear acceptance criteria. Strong communication across IT, Security, and Ops is essential.