← All roles

Staff Network Security Architect

Zoox· Information Technology and Applications – Information Security
Apply on company site
Hybrid (Foster City, CA)$228k - $273kFull-timePosted 4mo ago

About the role

Senior security architect owning target-state network security design across enterprise IT, OT, labs, and hybrid cloud; defines standards, threat models, and secure-by-design patterns while guiding multiple teams.

Responsibilities

  • Own Zoox's network security reference architecture across corporate, data center, lab/OT, and edge environments, and define the segmentation and trust model that everything else is built against
  • Serve as the security design authority for new infrastructure: run design reviews and threat models early enough to change the design, and define the criteria under which a design is approved, conditionally approved, or rejected
  • Translate security frameworks into buildable engineering standards. Map controls to NIST CSF 2.0, NIST 800-53, and ISO 27001 (IEC 62443 a plus for OT/lab), and turn them into reference patterns, guardrails, and acceptance criteria engineers can implement without interpreting policy
  • Define the zero-trust and identity-to-network strategy, including 802.1X/certificate-based NAC, PKI trust hierarchy, ZTNA and remote access, and how non-human and headless lab/vehicle assets are authenticated and authorized
  • Architect secure hybrid and multi-cloud connectivity (CloudWAN, SD-WAN, transit and inspection architectures, cloud-native controls) and define where inspection, enforcement, and logging belong
  • Drive secure-by-design into the delivery path: encode standards as Terraform modules, policy-as-code, and CI/CD guardrails so the secure pattern is the default one, not a review gate
  • Own data flow and trust boundary analysis for sensitive environments, including vehicle data, lab telemetry, and third-party and vendor connectivity
  • Own the governance side of architecture: risk articulation for leadership, exception and compensating control decisions, architecture decision records, and the multi-year roadmap that retires legacy patterns
  • Set technical direction and raise the bar across the team through mentorship, design review, and written standards rather than through direct ownership of day-to-day operations

Qualifications

  • 10+ years in network and security engineering, including 4+ years in an architecture or technical-lead role where you owned designs others implemented
  • Demonstrated ownership of an enterprise-scale segmentation or zero-trust architecture from concept through adoption
  • Ability to reason about security frameworks as design inputs: fluency with NIST CSF 2.0, NIST 800-53, and ISO 27001
  • Depth in threat modeling and secure-by-design for network and infrastructure, including data flow analysis, trust boundaries, blast radius, and failure modes
  • Strong platform grounding to keep designs buildable: next-gen firewalls (Palo Alto, Fortinet), AWS NFW, IDS/IPS, NAC/802.1X, PKI, VPN, ZTNA
  • Cloud network security depth in AWS and/or GCP, including inspection architecture, cloud-native enforcement, and IaC delivery with Terraform

Skills

Required:Network security architectureSecurity frameworks to engineering standardsThreat modeling and secure-by-designCloud and on-prem network security

Benefits

  • paid time off (sick leave, vacation, bereavement)
  • unpaid time off
  • Zoox Stock Appreciation Rights
  • Amazon RSUs
  • health insurance
  • long-term care insurance
  • long-term and short-term disability insurance
  • life insurance
Last updated Oct 21, 2026. Interested? Apply on the company site.
Zoox logo

About Zoox

It's Not a Car | Zoox

Zoox is a purpose-built autonomous vehicle designed for riders, not drivers. Learn more about the Zoox robotaxi and the future of ride-hailing.

autonomous vehiclerobotaxiride-hailing
Company profileWebsite

More open roles at Zoox