Senior Network Security Engineer: Cloud, OT & Zero-Trust

Zoox; Foster City (CA); On-site; USD 181,000 - 218,000; Full time

Benefits offered by this job

RSUs

Stock Appreciation Rights

Sign-on bonus

Paid time off

Health insurance

Long-term disability

Life insurance

Zoo-stock appreciation rights

Job summary

Zoox seeks a Network Security Engineer to design, implement, and operate security controls across its enterprise, OT networks, and cloud environments (AWS, GCP). You will collaborate with Network Engineering, IT, Product Security, and Software Engineering to defend Zoox’s digital borders.

You will architect secure remote access, manage firewalls, and drive automation with Terraform and Python, while ensuring 24/7 security operations and compliance with major standards.

Qualifications

• 6+ years of network security engineering experience securing enterprise, cloud, and OT/lab environments.
• Hands-on expertise in next-gen firewalls (Palo Alto, Fortinet), AWS NFW, WAFs, IDS/IPS, NAC/802.1X, PKI, VPN, and ZTNA solutions.
• Strong understanding of core network protocols (TCP/IP, BGP, OSPF, VLAN, 802.1X, TLS/PKI) and cloud networking security principles (AWS, GCP, or Azure).
• Automation: IaC and tooling including Terraform, Python, CI/CD pipelines, and REST APIs.
• Security Operations: monitoring, threat detection, and security operations tooling (SIEM, IDS/IPS, vulnerability mgmt).
• Compliance: support for NIST 800-53, CSF 2.0, ISO 27001 with evidence collection.

Responsibilities

• Design, implement, and maintain secure hybrid/multi-cloud network architectures with zero-trust access controls and segmentation.
• Own and operate next-gen firewall platforms (Palo Alto, Fortinet) including policy architecture, NAT, URL filtering, SSL/TLS decryption, and threat tuning.
• Architect and own secure remote access solutions (VPN, ZTNA, site-to-site) with certificate-based authentication and IdP integration.
• Drive IaC and automation using Terraform, Python, CI/CD, and REST APIs for configuration, firewall policies, and security baselines.
• Oversee 24/7 network security monitoring, traffic analysis, threat detection, vulnerability assessments, and remediation.
• Lead NAC initiatives via 802.1X across wired and wireless environments.
• Collaborate with Product Security, SRE, IT, and Software Engineering on cross-functional security programs.

Skills

6+ years experience

Zero-trust networking

VPN/ZTNA

Cloud security

IaC automation

Python

Terraform

CI/CD

REST APIs

SIEM/IDS/IPS

NAC/802.1X

TLS/PKI

Security compliance

Tools

Palo Alto Networks

Fortinet

AWS NFW

WAFs

IDS/IPS

Zscaler/Netskope/Prisma Access

Kubernetes

Job description

Zoox seeks a Network Security Engineer to design, implement, and operate security controls across its enterprise, OT networks, and cloud environments (AWS, GCP). You will collaborate with Network Engineering, IT, Product Security, and Software Engineering to defend Zoox’s digital borders.

You will architect secure remote access, manage firewalls, and drive automation with Terraform and Python, while ensuring 24/7 security operations and compliance with major standards.