Senior Network Security Engineer

Muonspace; San Jose (CA); On-site; USD 184,000 - 208,000; Full time

Benefits offered by this job

Equity compensation

Medical insurance

Dental insurance

Vision insurance

401k plan

Vacation & holidays

Parental leave

Sick leave

Job summary

Muon Space in San Jose, CA seeks a Senior Network Security Engineer to design, secure, and operate the networks and cloud environments powering our fast-growing company. You will own network security across our infrastructure—Cisco Meraki, Cloudflare edge and zero-trust services, and cloud platforms such as AWS and GCP.

This onsite role requires collaboration with IT, Security, and engineering teams, and the ability to implement secure remote access for a hybrid workforce while protecting

Qualifications

• 5+ years of network engineering or security experience.
• Hands-on with designing and operating Cisco Meraki networks.
• Experience with Cloudflare WAF, DNS, DDoS, and Zero Trust.
• Experience securing networks in AWS and GCP.
• Strong fundamentals in firewalls, VPNs, and segmentation.

Responsibilities

• Design, implement, and operate secure network architectures for on‑prem and cloud environments.
• Own and administer Cisco Meraki network infrastructure including switching and SD-WAN.
• Manage Cloudflare services for edge security, DNS, WAF, DDoS protection, and ZTNA.
• Architect and harden network security across AWS and GCP with VPC design and firewalls.
• Monitor, detect, and respond to network security events; lead investigations.
• Implement secure remote access, VPN, and zero‑trust for a hybrid workforce.
• Define and enforce segmentation and access controls for protected data.

Skills

Network security

Cisco Meraki

Cloudflare services

AWS / GCP security

Zero-trust architecture

Tools

Cisco Meraki

Cloudflare

AWS

GCP

Job description

About the role

Muon seeks a Senior Network Security Engineer to join our team. The ideal candidate is a seasoned network security professional who will design, secure, and operate the networks and cloud environments that power our fast-growing company. In this role you will own network security across our infrastructure—including Cisco Meraki networking, Cloudflare edge and zero-trust services, and cloud platforms such as AWS and GCP—while building resilient, defensible architectures. You will partner with IT, Security, and engineering teams to protect our environments and the export-controlled data they support.

This position is onsite and requires working in our San Jose, CA office five days a week.

Responsibilities

• Design, implement, and operate secure network architectures across our on-premises sites and cloud environments.
• Own and administer our Cisco Meraki network infrastructure, including switching, wireless, security appliances, and SD-WAN.
• Manage Cloudflare services for edge security, DNS, WAF, DDoS protection, and Zero Trust network access.
• Architect and harden network security controls across AWS and GCP, including VPC design, segmentation, firewalls, and secure connectivity.
• Monitor, detect, and respond to network security events, and lead investigation and remediation of incidents.
• Implement and maintain secure remote access, VPN, and zero-trust solutions for a hybrid workforce.
• Define and enforce network segmentation and access controls that protect CUI, EAR, and ITAR-controlled data.
• Partner with IT, Security, and engineering teams to align network security with compliance, operational, and business requirements.

Qualifications

• 5+ years of network engineering and/or network security experience.
• Hands-on experience designing and operating Cisco Meraki network environments.
• Experience with Cloudflare services such as WARP, WAF, DNS, DDoS protection, and Zero Trust (ZTNA).
• Experience securing cloud networks in AWS and GCP.
• Strong understanding of network security fundamentals, including firewalls, segmentation, VPN, and zero-trust architectures.
• Familiarity with network monitoring, logging, and incident detection and response.
• Proactive, reliable, and able to work with minimal supervision.

Nice-to-have Skills

• Experience supporting U.S. Government programs.
• Experience with CUI data handling.
• Experience with EAR/ITAR-controlled data handling.
• Relevant certifications (e.g., Cisco/Meraki, Cloudflare, AWS or GCP security) or an active or eligible U.S. security clearance.

Salary

The salary range for this role is $184,000 - $208,000, plus a competitive equity grant and comprehensive benefits package. Final compensation will be determined based on skills, qualifications, experience, and geographic location as assessed during the interview process.

About Muon Space

Founded in 2021, Muon Space is an end-to-end Space Systems Provider that designs, builds, and operates LEO satellite constellations delivering mission-critical data. Our revolutionary, integrated technology stack enables customers to optimize every dimension of their missions for faster time-to-orbit and superior constellation remote sensing performance. Our state-of-the-art facility in the heart of Silicon Valley is optimized for manufacturing spacecraft and rapid, flexible payload integration at scale. From climate monitoring to national security, Muon Space is dedicated to delivering Earth Intelligence for a safer and more resilient world.

Taking Care of Our Team

At Muon salary is only part of our total compensation package. In addition to salary, full-time employees receive equity compensation as well as benefits including medical, dental, and vision insurance, a 401k retirement plan, short & long term disability and life insurance. We also offer three weeks paid vacation for new employees, along with 12 paid holidays, unlimited sick time and paid parental leave.

Our mission embraces the entire planet and we believe our team should too. Muon is dedicated to creating a diverse and dynamic company and workforce. We believe in equal employment opportunity regardless of race, color, ancestry, religion, sex, age, national origin, citizenship, sexual orientation, marital status, disability, or gender identity. We value diversity in the workplace, and that starts with our applicants. In addition, if you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.

ITAR/EAR Requirements

This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. The Company may, for legitimate business reasons, decline to pursue any export licensing process.