Network Security Engineer

About the role

SpaceX is looking for a Network Security Engineer to implement and operate security for SpaceX corporate and enterprise networks. This is a hands-on network security role: operating firewalls, VPNs, and IDS/IPS; implementing access controls; assessing risk in existing configurations; and keeping security systems maintained in production.

Responsibilities

• Develop and implement network security tools.
• Produce threat models and assess risk around existing configurations.
• Provide subject matter expertise on network security, firewalls, and industry best practices.
• Configure and maintain firewalls and other network security controls on the SpaceX enterprise network based on operational requirements.
• Analyze operational needs that present security challenges and develop secure network solutions.
• Document and formalize security processes.
• Maintain network security systems by applying patches and performing other periodic maintenance.
• Partner with other SpaceX teams to determine functional needs, develop secure architectures, and communicate security best practices and policies.

Basic Qualifications

• Bachelor's degree in a STEM field and 3+ years of network security experience; OR 5+ years of network security experience in lieu of a degree.
• 1+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.
• 1+ years of experience hardening Windows, MacOS, and/or Linux operating systems.

Preferred Skills and Experience

• Firewalls (Palo Alto and Juniper).
• Network IDS/IPS solutions.
• Network monitoring solutions (NDR).
• Switch/router ACLs.
• Network access control solutions.
• IPsec and TLS-based VPNs.
• Web application firewalls.
• Email security.
• Logging and alerting with SIEMs.
• Python programming and automation.
• Familiarity with networking protocols and the OSI model.
• Experience testing and implementing changes in a production environment.

Additional Requirements

• This role requires you to be onsite. Hybrid or remote work will not be considered.
• Willingness to work extended hours and weekends as needed.

Itar Requirements

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here.