Sr. Network Security Engineer

United States Digital Space LLC; Palo Alto (CA); On-site; USD 165,000 - 280,000; Full time

Job summary

United States Digital Space LLC is seeking a Sr. Network Security Engineer to design, implement, and operate security for corporate and enterprise networks.

This hands-on role focuses on segmentation, routing, and access controls, and involves operating firewalls from Palo Alto, Check Point, Juniper, and Arista in a fast-paced environment. The successful candidate will be a self-starter with strong multi-tasking abilities, capable of turning operational requirements into secure architectures,

Qualifications

• Bachelor's degree in a STEM field or 8+ years of experience in lieu of degree.
• 3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.
• Experience with firewalls and network security technologies.

Responsibilities

• Design, implement, and support network security for corporate and enterprise environments.
• Configure and maintain network security controls, policies, and architectures based on operational requirements.
• Provide subject matter expertise on network security, firewalls, and industry best practices.
• Analyze operational needs that present security challenges and develop secure network solutions.
• Implement and maintain network segmentation, routing, and access controls.
• Partner with other teams to determine functional needs, develop secure architectures, and communicate security best practices and policies.
• Serve as an escalation point for network security issues.

Skills

Network security

Firewalls

eBGP fabrics

ACLs

IPsec/TLS VPNs

SIEMs

Production changes

Education

Bachelor's degree in STEM

8+ years experience in lieu of degree

Tools

Palo Alto

Check Point

Juniper

Arista

Job description

the company was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today the company is actively developing the technologies to make this possible, with the ultimate goal ofenabling human life on Mars.

the company was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today the company is actively developing the technologies to make this possible, with the ultimate goal ofenabling human life on Mars.

SR. NETWORK SECURITY ENGINEER

the company is looking for a Sr. Network Security Engineer to design, implement, and operate security for the company corporate and enterprise networks. This is hands-on network security work: designing and implementing segmentation, routing, and access controls; operating firewalls and related platforms such as Palo Alto, Check Point, Juniper, and Arista; and turning operational requirements into architectures that hold up in production. The ideal candidate will be flexible, excel at multi-tasking, and flourish in a fast-paced and challenging environment. This person should be a self-starter, self-motivator, and possess the ingenuity to excel in this position.

RESPONSIBILITIES:

• Design, implement, and support network security for corporate and enterprise environments.

• Configure and maintain network security controls, policies, and architectures based on operational requirements.

• Provide subject matter expertise on network security, firewalls, and industry best practices.

• Analyze operational needs that present security challenges and develop secure network solutions.

• Implement and maintain network segmentation, routing, and access controls.

• Partner with other the company teams to determine functional needs, develop secure architectures, and communicate security best practices and policies.

• Serve as an escalation point for network security issues.

BASIC QUALIFICATIONS:

• Bachelor's degree in a STEM field and 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree.

• 3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.

PREFERRED SKILLS AND EXPERIENCE:

• Experience with network security technologies, including their operation and limitations.

• Firewalls (Palo Alto, Check Point, Juniper, and Arista).

• Experience designing and configuring eBGP fabrics, including large multi-path networks built from scratch.

• Switch/router ACLs.

• Network access control solutions.

• IPsec and TLS-based VPNs.

• Web application firewalls.

• Email security.

• Logging and alerting with SIEMs.

• Familiarity with networking protocols and the OSI model.

• Experience testing and implementing changes in a production environment.

ADDITIONAL REQUIREMENTS:

• This role requires you to be onsite. Hybrid or remote work will not be considered.

• Willingness to work extended hours and weekends as needed.

COMPENSATION AND BENEFITS:

Pay Range:Level 3: $165,000.00 - $280,000.00

Your actual level and base salary will be determined on a case‑case basis and may vary based on the following considerations: job-related knowledge and skills, education, and experience.

Base salary is just one part of your total rewards package at the company. You may also be eligible for long‑term incentives, in the form of company stock or long‑term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long‑term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees accrue paid sick leave pursuant to Company policy which satisfies or exceeds the accrual, carryover, and use requirements of the law.

ITAR REQUIREMENTS:

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.

the company is an Equal Opportunity Employer; employment with the company is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of the company’s Affi…