← All roles

Senior Network Security Engineer

Zoox· Information Technology and Applications – Information Security
Apply on company site
Hybrid (Foster City, CA)$198k - $238kFull-timePosted 3mo ago

About the role

Design, implement, and operate security controls across Zoox's enterprise, OT networks, and cloud infrastructure spanning on-premises data centers and public cloud environments (AWS, GCP); ensure secure hybrid/multi-cloud architectures, strong access controls, and proactive security operations.

Responsibilities

  • Design, implement, and maintain secure hybrid/multi-cloud network architectures (AWS/GCP, CloudWAN); enforce zero-trust access controls and network segmentation across corporate, data center, lab, and edge environments; develop and maintain related policies, standards, and architecture diagrams
  • Own and operate next-generation firewall platforms (Palo Alto Networks, Fortinet), managing policy architecture, segmentation, NAT, URL filtering, SSL/TLS decryption, and threat prevention tuning
  • Architect, operate, and own the lifecycle of secure remote access solutions (VPN, ZTNA, site-to-site tunnels), ensuring high availability, certificate-based authentication, and integration with identity providers (SAML, Entra ID)
  • Drive automation and Infrastructure-as-Code (IaC) using Terraform, Python, CI/CD, and REST APIs for configuration management, firewall policies, and security baselines; integrate LLM-based tools to streamline operational tasks and reduce manual toil
  • Oversee security operations including 24/7 network security monitoring, traffic analysis, threat detection, vulnerability assessments, and remediation; support compliance requirements by conducting security reviews for new projects and infrastructure changes
  • Drive 802.1X/certificate-based Network Access Control (NAC) initiatives across wired and wireless environments
  • Collaborate with team members and contribute to cross-functional security initiatives with Product Security, SRE, IT, and Software Engineering teams

Qualifications

  • 8+ years of network security engineering experience securing enterprise and cloud environments
  • Platform Expertise: Deep, hands-on expertise in next-gen firewalls (Palo Alto, Fortinet), AWS NFW, WAFs, IDS/IPS, NAC/802.1X, PKI, VPN, and ZTNA solutions (Zscaler, Netskope, Prisma Access, or equivalent)
  • Technical Knowledge: Strong understanding of core network protocols (TCP/IP, BGP, OSPF, VLAN, 802.1X, TLS/PKI) and cloud networking security principles (AWS, GCP, or Azure)
  • Automation: Hands-on experience with IaC and automation tooling including Terraform, Python, CI/CD pipelines, and REST APIs
  • Security Operations: Experience with network security monitoring, threat detection, and security operations tooling (SIEM, IDS/IPS, vulnerability management platforms)
  • Compliance: Proven experience supporting major compliance initiatives (NIST 800-53, CSF 2.0, ISO 27001)

Skills

Required:Network security engineeringNext-gen firewallsRemote access solutionsIaC / AutomationSecurity operations
Nice to have:Compliance

Benefits

  • paid time off (e.g. sick leave, vacation, bereavement)
  • unpaid time off
  • Zoox Stock Appreciation Rights
  • Amazon RSUs
  • health insurance
  • long-term care insurance
  • long-term and short-term disability insurance
  • life insurance
Last updated Oct 21, 2026. Interested? Apply on the company site.
Zoox logo

About Zoox

It's Not a Car | Zoox

Zoox is a purpose-built autonomous vehicle designed for riders, not drivers. Learn more about the Zoox robotaxi and the future of ride-hailing.

autonomous vehiclerobotaxiride-hailing
Company profileWebsite

More open roles at Zoox