Network Security Engineer

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

NETWORK SECURITY ENGINEER

SpaceX is looking for a Network Security Engineer to implement and operate security for SpaceX corporate and enterprise networks. This is a hands-on network security role: operating firewalls, VPNs, and IDS/IPS; implementing access controls; assessing risk in existing configurations; and keeping security systems maintained in production.

RESPONSIBILITIES:

• Develop and implement network security tools.
• Produce threat models and assess risk around existing configurations.
• Provide subject matter expertise on network security, firewalls, and industry best practices.
• Configure and maintain firewalls and other network security controls on the SpaceX enterprise network based on operational requirements.
• Analyze operational needs that present security challenges and develop secure network solutions.
• Document and formalize security processes.
• Maintain network security systems by applying patches and performing other periodic maintenance.
• Partner with other SpaceX teams to determine functional needs, develop secure architectures, and communicate security best practices and policies.

BASIC QUALIFICATIONS:

• Bachelor's degree in a STEM field and 3+ years of network security experience; OR 5+ years of network security experience in lieu of a degree.
• 1+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs.
• 1+ years of experience hardening Windows, MacOS, and/or Linux operating systems.

PREFERRED SKILLS AND EXPERIENCE:

• Firewalls (Palo Alto and Juniper).
• Network IDS/IPS solutions.
• Network monitoring solutions (NDR).
• Switch/router ACLs.
• Network access control solutions.
• IPsec and TLS-based VPNs.
• Web application firewalls.
• Email security.
• Logging and alerting with SIEMs.
• Python programming and automation.
• Familiarity with networking protocols and the OSI model.
• Experience testing and implementing changes in a production environment.

ADDITIONAL REQUIREMENTS:

• This role requires you to be onsite. Hybrid or remote work will not be considered.
• Willingness to work extended hours and weekends as needed.

ITAR REQUIREMENTS:

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here .