Senior Network Security Engineer: Zero-Trust VPN & Linux Infra

Remote; San Francisco (CA); On-site; USD 180,000 - 260,000; Full time

Job summary

SpaceX is seeking a Sr. Network Security Engineer to design, deploy, manage, and secure enterprise remote access VPN infrastructure with a strong emphasis on Tailscale and WireGuard.

You will own the end-to-end lifecycle of remote access, configure cross-platform VPN clients, and develop automation in Python to reinforce security and reliability. Ideal candidates have a deep networking background, experience with Linux systems, and a track record of implementing zero-trust architectures in

Qualifications

• Bachelor’s degree in STEM field and 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree.
• 3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.

Responsibilities

• Provide subject matter expertise on network security, firewalls, zero-trust architectures, and industry best practices, with primary focus on modern remote access VPN technologies.
• Architect, design, deploy, and secure enterprise remote access VPN solutions end-to-end (including supporting components such as routers, exit nodes, and connectors), with strong emphasis on Tailscale, WireGuard, IPsec, and SSL-based implementations.
• Own the full lifecycle of remote access infrastructure from initial design and ground-up implementation through ongoing management, policy definition, client distribution, and performance optimization.
• Configure, deploy, and support VPN clients across multiple platforms (Windows, macOS, Linux, iOS, Android) while performing advanced troubleshooting of complex connectivity and performance issues.
• Manage Linux-based infrastructure and network security systems with end-to-end ownership of configuration, custom tooling, and operational reliability.
• Develop automation and CI/CD workflows (Python or similar) to streamline deployment, policy enforcement, monitoring, and maintenance of remote access and security systems.
• Implement and support zero-trust remote access architectures; manage firewall policies and network security appliances with tight integration of VPN solutions.
• Serve as an escalation point for complex network security and remote connectivity challenges; collaborate cross-functionally with engineering and operations teams to gather requirements, design secure solutions, and communicate best practices.
• Monitor VPN performance, logs, and overall security posture; proactively identify issues, drive resolutions, and formalize processes and change management for remote access infrastructure.
• Apply system patches, perform periodic maintenance, and continuously improve the reliability and security of the remote access environment.

Skills

Network security

Remote access VPN

Linux

Python

Go

CI/CD

Education

Bachelor’s degree in STEM

Tools

SIEMs

Job description

SpaceX is seeking a Sr. Network Security Engineer to design, deploy, manage, and secure enterprise remote access VPN infrastructure with a strong emphasis on Tailscale and WireGuard.

You will own the end-to-end lifecycle of remote access, configure cross-platform VPN clients, and develop automation in Python to reinforce security and reliability. Ideal candidates have a deep networking background, experience with Linux systems, and a track record of implementing zero-trust architectures in