Senior Network Security Engineer - VPN & ZeroTrust

SpaceX; Hawthorne (CA); On-site; USD 165,000 - 235,000; Full time

Job summary

SpaceX in Hawthorne, CA is seeking a Sr. Network Security Engineer to architect, deploy, and operate enterprise remote access VPNs with a strong focus on Tailscale, WireGuard, IPsec, and SSL-based solutions.

You will own the full lifecycle of remote access infrastructure, develop automation and CI/CD tooling in Python, and collaborate with engineering to enforce zero-trust security across multi-platform endpoints.

Qualifications

• Bachelor’s degree in a STEM field with 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree.
• 3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.

Responsibilities

• Architect, deploy, and secure enterprise remote access VPN solutions end-to-end (including supporting components such as routers, exit nodes, and connectors).
• Configure, deploy, and support VPN clients across Windows, macOS, Linux, iOS, Android.
• Develop automation and CI/CD workflows (Python or similar) to streamline deployment, policy enforcement, monitoring, and maintenance of remote access and security systems.
• Monitor VPN performance, logs, and overall security posture; drive resolutions and change management for remote access infrastructure.
• Own the full lifecycle of remote access infrastructure from ground-up design to ongoing management and optimization.

Skills

Network security

VPN architecture

Python

Go code

Linux

CI/CD

Zero trust

SIEM

Networking

Education

Bachelor’s degree in STEM

Tools

Tailscale

WireGuard

IPsec

SSL VPN

Job description

SpaceX in Hawthorne, CA is seeking a Sr. Network Security Engineer to architect, deploy, and operate enterprise remote access VPNs with a strong focus on Tailscale, WireGuard, IPsec, and SSL-based solutions.

You will own the full lifecycle of remote access infrastructure, develop automation and CI/CD tooling in Python, and collaborate with engineering to enforce zero-trust security across multi-platform endpoints.