Sr. Network Security Engineer

SpaceX; Brownsville (TX); On-site; USD 140,000 - 210,000; Full time

Job summary

SpaceX in Brownsville, TX is seeking a Sr. Network Security Engineer to design, implement, and operate security for SpaceX corporate and enterprise networks.

This hands-on role focuses on segmentation, routing, and access controls while managing firewalls from Palo Alto, Check Point, Juniper, and Arista. You will collaborate with IT and other SpaceX teams to enforce security best practices and produce secure production architectures, with a focus on incident management and change control.

Qualifications

• Bachelor's degree in a STEM field with 5+ years of network security experience, or 8+ years of network security experience in lieu of a degree.
• 3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.
• Onsite only; hybrid or remote work will not be considered.

Responsibilities

• Design, implement, and support network security for corporate and enterprise environments.
• Configure and maintain network security controls, policies, and architectures based on operational requirements.
• Provide subject matter expertise on network security, firewalls, and industry best practices.
• Analyze operational needs that present security challenges and develop secure network solutions.
• Implement and maintain network segmentation, routing, and access controls.
• Lead technical design reviews for network security changes.
• Define network security patterns and standards.
• Serve as an escalation point for network security issues.
• Drive network security incidents to root cause and a durable fix.
• Partner with network engineering, IT, and other SpaceX teams to determine functional needs, develop secure architectures, and communicate security best practices and policies.
• Test and implement changes in a production environment with change control.

Skills

Network security

Firewalls

eBGP fabrics

ACLs

VPNs

SIEM

Security architecture

Incident response

Education

Bachelor's degree in STEM

Experience in lieu of degree

Tools

Palo Alto

Check Point

Juniper

Arista

SIEM platforms

Job description

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal ofenabling human life on Mars.

SR. NETWORK SECURITY ENGINEER

SpaceX is looking for a Sr. Network Security Engineer to design, implement, and operate security for SpaceX corporate and enterprise networks. This is hands-on network security work: designing and implementing segmentation, routing, and access controls; operating firewalls and related platforms such as Palo Alto, Check Point, Juniper, and Arista; and turning operational requirements into production architectures.

RESPONSIBILITIES:

• Design, implement, and support network security for corporate and enterprise environments.
• Configure and maintain network security controls, policies, and architectures based on operational requirements.
• Provide subject matter expertise on network security, firewalls, and industry best practices.
• Analyze operational needs that present security challenges and develop secure network solutions.
• Implement and maintain network segmentation, routing, and access controls.
• Lead technical design reviews for network security changes.
• Define network security patterns and standards.
• Serve as an escalation point for network security issues.
• Drive network security incidents to root cause and a durable fix.
• Partner with network engineering, IT, and other SpaceX teams to determine functional needs, develop secure architectures, and communicate security best practices and policies.
• Test and implement changes in a production environment with change control.

BASIC QUALIFICATIONS:

• Bachelor's degree in a STEM field and 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree.
• 3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.

PREFERRED SKILLS AND EXPERIENCE:

• Experience with network security technologies, their operation, and limitations.
• Firewalls (Palo Alto, Check Point, Juniper, and Arista).
• Experience designing and configuring eBGP fabrics for large multi-path networks built from scratch.
• Switch/router ACLs.
• Network access control solutions.
• IPsec and TLS-based VPNs.
• Web application firewalls.
• Email security.
• Logging and alerting with SIEMs.
• Familiarity with networking protocols and the OSI model.
• Experience testing and implementing changes in a production environment.
• Experience leading technical design reviews and defining network security patterns and standards.

ADDITIONAL REQUIREMENTS:

• This role requires you to be onsite. Hybrid or remote work will not be considered.
• Willingness to work extended hours and weekends as needed.

ITAR REQUIREMENTS:

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. * 1157, or (iv) Asylee under 8 U.S.C. * 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX's Aff... ??? .