Sr. Network Security Engineer

SpaceX; Hawthorne (CA); Sur place; USD 170 000 - 210 000; Plein temps

Résumé du poste

SpaceX is seeking a Sr. Network Security Engineer to design, deploy, and manage enterprise remote access VPN infrastructure focused on Tailscale and WireGuard.

The role spans architecture, client support across Windows, macOS, Linux, iOS and Android, and automation of security policy and deployment pipelines. The ideal candidate combines deep network security expertise with a hands-on ability to build scalable zero-trust VPN systems, while collaborating with engineering and operations in a

Qualifications

• Bachelor’s degree in a STEM field and 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree.
• Deep expertise in remote access VPN technologies (Tailscale, WireGuard) and zero-trust architectures.
• Experience designing, deploying, and managing enterprise VPN infrastructure and related security controls.

Responsabilités

• Architect, deploy, and secure enterprise remote access VPN solutions end-to-end (including routers, exit nodes, and connectors).
• Configure, deploy, and support VPN clients across Windows, macOS, Linux, iOS, Android.
• Develop automation and CI/CD workflows to streamline deployment, policy enforcement, monitoring, and maintenance.
• Monitor VPN performance, logs, and security posture; drive resolutions and improvements.
• Serve as escalation point for complex network security and remote connectivity challenges.

Connaissances

Network security

Zero-trust architectures

Tailscale

WireGuard

IPsec

Python

CI/CD

Linux

Formation

Bachelor's degree in STEM

Outils

Tailscale

WireGuard

IPsec

SSL VPN

Description du poste

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

SR. NETWORK SECURITY ENGINEER

SpaceX is looking for a Sr. Network Security Engineer with deep expertise in network security technologies and a strong emphasis on remote access VPN solutions (particularly Tailscale and WireGuard). This role requires a strong networking, infrastructure, systems, and software background and will focus heavily on designing, deploying, managing, securing, and troubleshooting enterprise remote VPN infrastructure. The employee will be a member of the Network Security Engineering team. The ideal candidate will be flexible, excel at multi-tasking, and flourish in a fast-paced and challenging environment. This person should be a self-starter, self-motivator, and possess the ingenuity to excel in this position.

RESPONSIBILITIES:

• Provide subject matter expertise on network security, firewalls, zero-trust architectures, and industry best practices, with primary focus on modern remote access VPN technologies.
• Architect, design, deploy, and secure enterprise remote access VPN solutions end-to-end (including supporting components such as routers, exit nodes, and connectors), with strong emphasis on Tailscale, WireGuard, IPsec, and SSL-based implementations.
• Own the full lifecycle of remote access infrastructure from initial design and ground-up implementation through ongoing management, policy definition, client distribution, and performance optimization.
• Configure, deploy, and support VPN clients across multiple platforms (Windows, macOS, Linux, iOS, Android) while performing advanced troubleshooting of complex connectivity and performance issues.
• Manage Linux-based infrastructure and network security systems with end-to-end ownership of configuration, custom tooling, and operational reliability.
• Develop automation and CI/CD workflows (Python or similar) to streamline deployment, policy enforcement, monitoring, and maintenance of remote access and security systems.
• Implement and support zero-trust remote access architectures; manage firewall policies and network security appliances with tight integration of VPN solutions.
• Serve as an escalation point for complex network security and remote connectivity challenges; collaborate cross-functionally with engineering and operations teams to gather requirements, design secure solutions, and communicate best practices.
• Monitor VPN performance, logs, and overall security posture; proactively identify issues, drive resolutions, and formalize processes and change management for remote access infrastructure.
• Apply system patches, perform periodic maintenance, and continuously improve the reliability and security of the remote access environment.

BASIC QUALIFICATIONS:

• Bachelor’s degree in a STEM field and 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree.