Senior Network Security Engineer

Muon Space, Inc.; San Jose (CA); Hybrid; USD 184,000 - 208,000; Full time

Benefits offered by this job

Equity

Medical, dental, and vision insurance

401k retirement plan

3 weeks paid vacation

12 paid holidays

Paid parental leave

Job summary

Muon Space, Inc. seeks a Senior Network Security Engineer to design, secure, and operate networks and cloud environments powering our fast-growing space tech company.

In this onsite role at our San Jose, CA office, you will own security across Cisco Meraki, Cloudflare edge and zero-trust, and AWS/GCP, partnering with IT, Security, and engineering to protect critical data and systems. Responsibilities include implementing secure remote access, enforcing segmentation, and leading incident response

Qualifications

• 5+ years in network engineering or security.
• Hands-on Cisco Meraki design and operations.
• Experience with Cloudflare edge services and ZTNA.
• Experience securing networks in AWS and GCP.
• Strong knowledge of firewalls, segmentation, VPN, and zero-trust.

Responsibilities

• Design, implement, and operate secure network architectures across on-prem and cloud.
• Own and administer Cisco Meraki network infrastructure (switching, wireless, security, SD-WAN).
• Manage Cloudflare services for edge security, DNS, WAF, DDoS, and ZTNA.
• Architect and harden network security across AWS and GCP (VPC, segmentation, firewalls).
• Monitor, detect, and respond to network security events; lead investigations.
• Implement and maintain secure remote access, VPN, and zero-trust for a hybrid workforce.
• Define and enforce network segmentation and access controls for sensitive data (CUI, EAR, ITAR).
• Partner with IT, Security, and engineering to align security with requirements.

Skills

Cisco Meraki networking

Cloudflare services

AWS & GCP network security

Zero-trust architectures

Network monitoring & incident response

Tools

Cisco Meraki

Cloudflare

AWS

GCP

Job description

Muon seeks a Senior Network Security Engineer to join our team. The ideal candidate is a seasoned network security professional who will design, secure, and operate the networks and cloud environments that power our fast-growing company. In this role you will own network security across our infrastructure—including Cisco Meraki networking, Cloudflare edge and zero-trust services, and cloud platforms such as AWS and GCP—while building resilient, defensible architectures. You will partner with IT, Security, and engineering teams to protect our environments and the export-controlled data they support.

This position is onsite and requires working in our San Jose, CA office five days a week.

Responsibilities

• Design, implement, and operate secure network architectures across our on-premises sites and cloud environments.
• Own and administer our Cisco Meraki network infrastructure, including switching, wireless, security appliances, and SD-WAN.
• Manage Cloudflare services for edge security, DNS, WAF, DDoS protection, and Zero Trust network access.
• Architect and harden network security controls across AWS and GCP, including VPC design, segmentation, firewalls, and secure connectivity.
• Monitor, detect, and respond to network security events, and lead investigation and remediation of incidents.
• Implement and maintain secure remote access, VPN, and zero-trust solutions for a hybrid workforce.
• Define and enforce network segmentation and access controls that protect CUI, EAR, and ITAR-controlled data.
• Partner with IT, Security, and engineering teams to align network security with compliance, operational, and business requirements.

Qualifications

• 5+ years of network engineering and/or network security experience.
• Hands-on experience designing and operating Cisco Meraki network environments.
• Experience with Cloudflare services such as WARP, WAF, DNS, DDoS protection, and Zero Trust (ZTNA).
• Experience securing cloud networks in AWS and GCP.
• Strong understanding of network security fundamentals, including firewalls, segmentation, VPN, and zero-trust architectures.
• Familiarity with network monitoring, logging, and incident detection and response.
• Proactive, reliable, and able to work with minimal supervision.

Nice-to-have Skills

• Experience with CUI data handling.
• Experience with EAR/ITAR-controlled data handling.
• Relevant certifications (e.g., Cisco/Meraki, Cloudflare, AWS or GCP security) or an active or eligible U.S. security clearance.

The salary range for this role is $184,000 - $208,000 , plus a competitive equity grant and comprehensive benefits package. Final compensation will be determined based on skills, qualifications, experience, and geographic location as assessed during the interview process.

About Muon Space

Founded in 2021, Muon Space is an end-to-end Space Systems Provider that designs, builds, and operates LEO satellite constellations delivering mission-critical data. Our revolutionary, integrated technology stack enables customers to optimize every dimension of their missions for faster time-to-orbit and superior constellation remote sensing performance. Our state-of-the-art facility in the heart of Silicon Valley is optimized for manufacturing spacecraft and rapid, flexible payload integration at scale. From climate monitoring to national security, Muon Space is dedicated to delivering Earth Intelligence for a safer and more resilient world.

Taking Care of Our Team

At Muon salary is only part of our total compensation package. In addition to salary, full-time employees receive equity compensation as well as benefits including medical, dental, and vision insurance, a 401k retirement plan, short & long term disability and life insurance. We also offer three weeks paid vacation for new employees, along with 12 paid holidays, unlimited sick time and paid parental leave.

Our mission embraces the entire planet and we believe our team should too. Muon is dedicated to creating a diverse and dynamic company and workforce. We believe in equal employment opportunity regardless of race, color, ancestry, religion, sex, age, national origin, citizenship, sexual orientation, marital status, disability, or gender identity. We value diversity in the workplace, and that starts with our applicants. We encourage you to apply, even if you don't check all the boxes, and we look forward to reviewing your application! In addition, if you need a reasonable accommodation as part of your application for employment or interviews with us, please let us know.

This position requires access to export controlled information. To conform to U.S. Government export regulations applicable to that information, applicant must either be (A) a U.S. person, defined as a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (green card holder), (iii) refugee under 8 U.S.C. § 1157, or (iv) asylee under 8 U.S.C. § 1158, (B) eligible to access the export controlled information without a required export authorization, or (C) eligible and reasonably likely to obtain the required export authorization from the applicable U.S. government agency. The Company may, for legitimate business reasons, decline to pursue any export licensing process.