SR. NETWORK SECURITY ENGINEER
SpaceX is looking for a Sr. Network Security Engineer to design, implement, and operate security for SpaceX corporate and enterprise networks. This is hands-on network security work: designing and implementing segmentation, routing, and access controls; operating firewalls and related platforms such as Palo Alto, Check Point, Juniper, and Arista; and turning operational requirements into production architectures.
RESPONSIBILITIES:
- Design, implement, and support network security for corporate and enterprise environments.
- Configure and maintain network security controls, policies, and architectures based on operational requirements.
- Provide subject matter expertise on network security, firewalls, and industry best practices.
- Analyze operational needs that present security challenges and develop secure network solutions.
- Implement and maintain network segmentation, routing, and access controls.
- Lead technical design reviews for network security changes.
- Define network security patterns and standards.
- Serve as an escalation point for network security issues.
- Drive network security incidents to root cause and a durable fix.
- Partner with network engineering, IT, and other SpaceX teams to determine functional needs, develop secure architectures, and communicate security best practices and policies.
- Test and implement changes in a production environment with change control.
BASIC QUALIFICATIONS:
- Bachelor's degree in a STEM field and 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree.
- 3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.
PREFERRED SKILLS AND EXPERIENCE:
- Experience with network security technologies, their operation, and limitations.
- Firewalls (Palo Alto, Check Point, Juniper, and Arista).
- Experience designing and configuring eBGP fabrics for large multi-path networks built from scratch.
- Switch/router ACLs.
- Network access control solutions.
- IPsec and TLS-based VPNs.
- Web application firewalls.
- Email security.
- Logging and alerting with SIEMs.
- Familiarity with networking protocols and the OSI model.
- Experience testing and implementing changes in a production environment.
- Experience leading technical design reviews and defining network security patterns and standards.
ADDITIONAL REQUIREMENTS:
- This role requires you to be onsite. Hybrid or remote work will not be considered.
- Willingness to work extended hours and weekends as needed.