Network Engineer, Zero Trust

About the role

Network Engineer, Zero Trust | Tesla (Engineering & Information Technology)

Location: PALO ALTO, California | Req ID: 281414 | Job Type: Full-time

What to Expect

As a Zero Trust Network Engineer, you will be responsible for designing, implementing, and managing the network-layer controls that enforce Tesla's Zero Trust Architecture across a global enterprise environment. You will own network segmentation policies, traffic inspection and routing through Zero Trust proxies, microsegmentation enforcement, and network connectivity for Zero Trust platforms. Your work will ensure that Tesla's network infrastructure enforces least-privilege access at every layer, from datacenter east-west traffic to remote user connectivity.

What You'll Do

• Design and implement network architectures that enforce Zero Trust principles, including microsegmentation, ZTNA, and identity-aware traffic policies
• Configure and manage network-layer components of Zero Trust platforms (Zscaler ZIA/ZPA tunnels, Guardicore policies, GRE/IPSec, PAC files)
• Develop and maintain microsegmentation policies with Akamai Guardicore across datacenter, manufacturing, and cloud environments
• Manage connectivity between Tesla global sites and Zero Trust cloud services, including traffic steering, split tunneling, and bandwidth optimization
• Design and enforce network access policies based on identity, device posture, application sensitivity, and location
• Troubleshoot complex Zero Trust network issues spanning proxies, SSL/TLS inspection, DNS, certificates, routing, and client-to-app connectivity (including packet-level analysis)
• Partner with firewall, load balancer (F5), and DNS teams so Zero Trust policies integrate cleanly with existing network infrastructure
• Develop IT/OT segmentation strategies for manufacturing environments and maintain isolation between IT and OT networks
• Monitor Zero Trust network performance and inspection latency; optimize traffic paths to protect user experience
• Document topologies, segmentation maps, traffic flows, and policy rule sets; participate in 24/7 on-call as required

What You'll Bring

• 5+ years of network engineering experience with a focus on enterprise security architectures
• 3+ years hands-on with Zero Trust network technologies (Zscaler ZIA/ZPA, ZTNA, and/or microsegmentation platforms)
• Strong understanding of Zero Trust principles: microsegmentation, least-privilege network access, continuous verification, identity-aware networking
• Deep expertise in TCP/IP, DNS, HTTP/S, TLS/SSL, VPN (IPSec, GRE), and proxy architectures
• Experience with microsegmentation platforms (Akamai Guardicore, Illumio, and/or VMware NSX) at enterprise scale
• Proficiency with network analysis tools (Wireshark, tcpdump, nslookup, traceroute) and traffic flow analysis
• Experience with enterprise network infrastructure: firewalls (Palo Alto, Fortinet), load balancers (F5), SD-WAN, and DNS
• Understanding of OT/ICS network segmentation requirements for manufacturing environments
• Experience with cloud networking (Azure VNets, AWS VPCs, and/or GCP) and hybrid connectivity; familiarity with network automation (Terraform, Ansible, and/or Python)
• Degree in Computer Science, Network Engineering, or equivalent experience; strong cross-layer troubleshooting and clear written/verbal communication

Benefits

Along with competitive pay, as a full-time Tesla employee, you are eligible for the following benefits at day 1 of hire:

• Medical plans > plan options with $0 payroll deduction
• Family-building, fertility, adoption and surrogacy benefits
• Dental (including orthodontic coverage) and vision plans, both have options with a $0 paycheck contribution
• Company Paid (Health Savings Accounts) HSA Contribution when enrolled in the High-Deductible medical plan with HSA
• Healthcare and Dependent Care Flexible Spending Accounts (FSA)
• 401(k) with employer match, Employee Stock Purchase Plans, and other financial benefits
• Company paid Basic Life, AD&D
• Short-term and long-term disability insurance (90 day waiting period)
• Employee Assistance Program
• Sick and Vacation time (Flex time for salary positions, Accrued hours for Hourly positions), and Paid Holidays
• Back-up childcare and parenting support resources
• Voluntary benefits to include: critical illness, hospital indemnity, accident insurance, theft & legal services, and pet insurance
• Weight Loss and Tobacco Cessation Programs
• Tesla Babies program
• Commuter benefits
• Employee discounts and perks program
• Earned Wage Access: Real-time pay access paid daily, subject to eligibility and schedule (applicable for below Sr. Managers levels)

Expected Compensation$140,000 - $252,000/annual salary + cash and stock awards + benefitsPay offered may vary depending on multiple individualized factors, including market location, job-related knowledge, skills, and experience. The total compensation package for this position may also include other elements dependent on the position offered. Details of participation in these benefit plans will be provided if an employee receives an offer of employment.