Senior Network Security Engineer (Firewalls)

SR. NETWORK SECURITY ENGINEER

SpaceX is looking for a Sr. Network Engineer (Firewalls) with a wealth of experience with networking on platforms such as Palo Alto, Checkpoint, Juniper and Arista. This employee will be a member of the Security Engineering team within the larger Information Technology department. The ideal candidate will be flexible, excel at multi-tasking, and flourish in a fast-paced and challenging environment. This person should be a self-starter, self-motivator and possess the ingenuity to excel in this position.

RESPONSIBILITIES:

• Serve as the primary owner of Layer 3 networking on firewalls
• Configure, design and managed complex networks supporting Mission networks, factory networks and corporate networks
• Provide subject matter expertise on network security, firewalls and industry best practices
• Manage firewall configurations within the SpaceX enterprise network based on operational requirements
• Analyze and proactively come up with creative network solutions for operational needs that present security challenges
• Work with other SpaceX teams to determine functional needs, develop secure architectures, and communicate security best practices and policies

BASIC QUALIFICATIONS:

• Bachelor’s degree in a STEM field and 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree
• 3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs

PREFERRED SKILLS AND EXPERIENCE:

• Expert understanding of network security technologies, their operation and limitations, including:
  • Firewalls (Palo Alto and Juniper)
  • Configuring complex eBGP fabrics. Must know how to design a large complex multi-path network from scratch. Having seen someone else configure it does not count.
  • Switch/router ACLs
  • Network access control solutions
  • IPSec and TLS based VPNs
  • Web application firewalls
  • Email security
  • Logging and alerting with SIEMs
• Familiarity with networking protocols and the OSI model
• Experience testing and implementing changes in a production environment
• Adept at learning new technologies and systems
• Strong self-starting and time-management skills
• Excellent communication skills, both written and verbal

ADDITIONAL REQUIREMENTS:

• This role requires you to be onsite. Hybrid or remote work will not be considered.
• Willingness to work extended hours and weekends as needed.