Network Security Engineer
Posted Updated 2
views
Summary
Operates and secures network infrastructure across data centers, AWS cloud, and corporate systems — managing firewalls, segmentation, VPNs, routing, and switching while automating workflows with tools like Terraform, Ansible, and Python. Requires 7+ years of experience and regular on-site work in Sunnyvale, CA.
You will operate and secure network infrastructure across data centers, cloud environments, and corporate systems. You will manage firewalls, segmentation, access controls, VPNs, routing, switching, and telemetry; automate workflows; troubleshoot network issues; support data center operations; and maintain architecture documentation and runbooks.
Responsibilities
- Operate firewalls, ACLs, segmentation, and network security controls
- Support data center network deployment, configuration, troubleshooting, maintenance, and lifecycle management
- Implement firewall, ACL, and segmentation policies
- Manage NAT, load balancers, DNS filtering, proxies, and egress policies
- Operate VPN, ZTNA, NAC, Wi-Fi, and partner connectivity
- Review firewall rules and segmentation controls and remediate unnecessary exposure
- Automate network and security workflows with infrastructure automation and policy as code
- Support network telemetry, detection, investigation, and containment
- Troubleshoot routing, switching, TCP/IP, DNS, TLS, and cloud-networking issues
- Maintain network documentation, procedures, and runbooks
Requirements
- At least 7 years of network security, network engineering, cloud security, or infrastructure security experience
- Experience with firewalls, ACLs, segmentation, routing, switching, VPNs, and troubleshooting
- Experience operating data center and on-premises network infrastructure
- Experience with AWS networking, including VPCs, transit gateways, security groups, and load balancers
- Experience with Palo Alto, Juniper, Cloudflare, or similar platforms
- Proficiency with Terraform, Ansible, Python, GitOps, or similar automation tools
- Knowledge of ZTNA, NAC, egress controls, TCP/IP, DNS, and TLS
- Ability to work regularly on-site in Sunnyvale, California