Senior Network Security Engineer: NGFW, NAC & VPN

Valiant Technologies LLC; Foster City (CA); On-site; USD 120,000 - 180,000; Full time

Job summary

Zoox in Foster City, CA seeks a senior network security engineer contractor to oversee hands-on administration of NGFW/UTM platforms, policy lifecycle, and TLS inspection. This role operates within a formal change management process and collaborates across Security, IT, Product, and Operations.

You will design 802.1X NAC deployments, manage remote access VPN, maintain runbooks and diagrams, and drive project work with clear SOWs and milestones.

Qualifications

• 5+ years of network security engineering in production environments.
• 5+ years IT systems or application engineering and administration.
• Strong knowledge of all OSI layers.
• Hands-on Layer-7 protection: TLS inspection, URL/DNS filtering, IPS.
• Experience with enterprise NGFW/UTM platforms.
• Experience implementing 802.1X wired and wireless NAC.
• Experience with enterprise remote access VPN.
• Change-management experience.
• Clear written and verbal communication across teams.

Responsibilities

• Administer next-gen firewall/UTM platforms and perform updates.
• Tune URL filtering and Layer-7 inspection policies.
• IPS/IDS tuning and handling detections with the SOC.
• Support 802.1X NAC onboarding and certificate issues.
• Manage remote access VPN client troubleshooting and policies.
• Update runbooks and network diagrams; maintain documentation.
• Handle ticket queue with SLA and provide written updates.
• Contribute to scoped project work with SOWs and handoffs.

Skills

Network security engineering

IT systems administration

OSI model knowledge

Layer-7 protection techniques

VPN administration

Documentation and communication

Tools

NGFW/UTM platforms

802.1X NAC

VPN platforms

Job description

Zoox in Foster City, CA seeks a senior network security engineer contractor to oversee hands-on administration of NGFW/UTM platforms, policy lifecycle, and TLS inspection. This role operates within a formal change management process and collaborates across Security, IT, Product, and Operations.

You will design 802.1X NAC deployments, manage remote access VPN, maintain runbooks and diagrams, and drive project work with clear SOWs and milestones.