Security Engineer

Robotics Technologies LLC; Sunnyvale (CA); In loco; USD 140.000 - 170.000; Tempo pieno

Descrizione del lavoro

Zoox seeks a Security Engineer in Sunnyvale, CA for a 10-month contract to join the Information Security team. This hands-on role focuses on building and maintaining network security systems and delivering scoped buildout projects.

It is a hybrid onsite role with three days per week in the office. Responsibilities include administering next-gen firewall/UTM platforms, URL filtering, TLS inspection, IPS tuning, and NAC/VPN support.

Competenze

• 5+ years of network security engineering in production environments.
• 5+ years IT systems or application engineering and administration.
• Strong OSI layer knowledge and Layer-7 protection techniques.
• Experience with 802.1X NAC and enterprise VPN.
• Familiarity with formal change management processes.

Mansioni

• Administer next-gen firewall/UTM platforms, including policy changes and updates.
• Tune URL filtering, TLS inspection, and IPS with reduced false positives.
• Support 802.1X NAC, VPN access, and certificate issues.
• Maintain runbooks, diagrams, and configuration docs.
• Handle ticket queue with SLA adherence and clear updates.

Conoscenze

Network security

Systems administration

OSI model knowledge

Layer-7 protection

NGFW/UTM admin

802.1X NAC

VPN support

Change management

Strumenti

NGFW/UTM platforms

Descrizione del lavoro

US Citizen, Green Card, H-1B, OPT-EAD, CPT, Other

Job Title: Security Engineer
Location:Sunnyvale, CA
Duration: 10 Months
Bill Rate: $78/hour (C2C)
Job Type: W-2, 1099, C2C
Client: To Be Discussed Later
Work Authorization: US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Role Description:

The role will support the operation and upkeep of Zoox’s network security systems and deliver on scoped buildout projects. They’ll work under the direction of the Zoox Information Security team and follow our change management process for all production work. This is a hands-on engineering and administration role, not an advisory one. It is a hybrid, onsite role, requiring three days a week in the office.

Day-to-day operations:

• Administer next-gen firewall / UTM platforms: policy changes, rule lifecycle and cleanup, software and signature updates, certificate renewals.
• Operate URL filtering and Layer-7 inspection policies, including category tuning and exception handling
• IDS/IPS tuning: signature management, false positive reduction, escalation of confirmed detections to our security operations team
• Support 802.1X network access control: supplicant and authentication troubleshooting, certificate and policy issues, onboarding new device types.
• Support remote access VPN: client troubleshooting, access and split-tunnel policy changes, availability monitoring.
• Work the ticket queue to SLA with clear written updates to requesters
• Maintain runbooks, network diagrams, and configuration documentation

The contractor will also be assigned scoped project work. Anticipated projects include:

• [802.1X expansion to additional sites / device classes] — design, pilot, phased rollout, and handoff documentation
• [Network segmentation and SSL Decryption enforcement work] — policy design and enforcement

Each project will be defined with a written statement of work, acceptance criteria, and target completion date before work begins.

Required Qualifications

• 5+ years of network security engineering supporting production environments
• 5+ years of IT systems or application engineering and administration
• Strong working knowledge of all layers of the OSI model
• Hands-on experience with Layer-7 protection techniques (application control, TLS inspection, IPS, URL and DNS filtering)
• Direct experience administering enterprise NGFW/UTM platforms [name the vendors you run]
• Experience implementing and supporting 802.1X wired and wireless NAC
• Experience with enterprise remote access VPN
• Demonstrated experience operating within a formal change management process
• Clear written and verbal communication, with the ability to work across Information Security , IT, Product, and Operations teams

We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.