Network Security Engineer

Join Zoox as a Network Security Engineer, where you will design, implement, and operate security controls across the enterprise, OT networks, and cloud infrastructure. You will work closely with various teams, including Network Engineering, IT, Product Security, and Software Engineering. Your responsibilities will include maintaining secure hybrid/multi-cloud network architectures, managing next-generation firewall platforms, overseeing security operations, and driving automation and Infrastructure-as-Code initiatives. You will also collaborate with team members and contribute to cross-functional security initiatives.

• Design, implement, and maintain secure hybrid/multi-cloud network architectures, enforcing zero-trust access controls and network segmentation.
• Own and operate next-generation firewall platforms, managing policy architecture, segmentation, NAT, URL filtering, SSL/TLS decryption, and threat prevention tuning.
• Drive automation and Infrastructure-as-Code (IaC) using Terraform, Python, CI/CD, and REST APIs for configuration management, firewall policies, and security baselines.
• Technical Knowledge: Strong understanding of core network protocols (TCP/IP, BGP, OSPF, VLAN, 802.1X, TLS/PKI) and cloud networking security principles (AWS, GCP, or Azure)
• 6+ years of network security engineering experience securing enterprise, cloud, and OT/lab environments
• Compliance: Proven experience supporting major compliance initiatives (NIST 800-53, CSF 2.0, ISO 27001), including control implementation and evidence collection
• Platform Expertise: Deep, hands-on expertise in next-gen firewalls (Palo Alto, Fortinet), AWS NFW, WAFs, IDS/IPS, NAC/802.1X, PKI, VPN, and ZTNA solutions (Zscaler, Netskope, Prisma Access, or equivalent)
• Automation: Hands-on experience with IaC and automation tooling including Terraform, Python, CI/CD pipelines, and REST APIs
• Security Operations: Experience with network security monitoring, threat detection, and security operations tooling (SIEM, IDS/IPS, vulnerability management platforms), including integration with network controls
• Experience experimenting with or deploying AI/ML-based security capabilities (e.g., anomaly detection, behavioral analytics, LLM-driven copilots) in network or cloud security workflows
• Certifications: PCNSE, AWS Security Specialty, CCNA
• Experience in autonomous vehicle, robotics, IT/OT or automotive environments
• You do not need to match every listed expectation to apply for this position. Here at Zoox, we know that diverse perspectives foster the innovation we need to be successful, and we are committed to building a team that encompasses a variety of backgrounds, experiences, and skills