Senior Network Security Engineer – NGFW, VPN & NAC Expert

Cloud Analytics Technologies, LLC; Foster City (CA); On-site; USD 140,000 - 200,000; Full time

Job summary

Zoox Information Security is seeking a hands-on Network Security Engineer to join our security operations. You will administer NGFW/UTM, manage 802.1X NAC deployments, and tune TLS inspection and URL filtering in production environments.

You will handle VPN troubleshooting, maintain runbooks and diagrams, and work on scoped projects with clear SOWs and milestones. Strong OSI knowledge and experience in change management are essential.

Qualifications

• 5+ years of network security engineering in production environments.
• 5+ years IT systems or application engineering/administration.
• Strong knowledge of OSI model layers.
• Hands-on with Layer-7 protection techniques (TLS inspection, IPS, URL and DNS filtering).
• Experience administering enterprise NGFW/UTM platforms.
• Experience with 802.1X wired/wireless NAC.
• Experience with enterprise remote access VPN.
• Experience operating within change management.

Responsibilities

• Administer next-gen firewall/UTM platforms: policy changes and updates.
• Operate URL filtering and Layer-7 inspection policies.
• Tune IDS/IPS: reduce false positives; escalate detections.
• Support 802.1X NAC deployment and troubleshooting.
• Support remote access VPN: client troubleshooting and policy changes.
• Manage ticket queue with SLA updates.
• Maintain runbooks and network diagrams and documentation.
• Handle scoped project work with written SOW and milestones.

Skills

Network security engineering

IT systems administration

OSI model proficiency

Layer-7 protection techniques

Change management experience

Education

Certifications: PCNSE, Security+, CISSP

Tools

NGFW/UTM platforms

802.1X NAC

VPN

Job description

Zoox Information Security is seeking a hands-on Network Security Engineer to join our security operations. You will administer NGFW/UTM, manage 802.1X NAC deployments, and tune TLS inspection and URL filtering in production environments.

You will handle VPN troubleshooting, maintain runbooks and diagrams, and work on scoped projects with clear SOWs and milestones. Strong OSI knowledge and experience in change management are essential.