Sr. Network Security Engineer (Firewalls)

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars. SR. NETWORK SECURITY ENGINEER SpaceX is looking for a Sr. Network Engineer (Firewalls) with a wealth of experience with networking on platforms such as Palo Alto, Checkpoint, Juniper and Arista. This employee will be a member of the Security Engineering team within the larger Information Technology department. The ideal candidate will be flexible, excel at multi-tasking, and flourish in a fast-paced and challenging environment. This person should be a self-starter, self-motivator and possess the ingenuity to excel in this position. RESPONSIBILITIES: Serve as the primary owner of Layer 3 networking on firewalls Configure, design and managed complex networks supporting Mission networks, factory networks and corporate networks Provide subject matter expertise on network security, firewalls and industry best practices Manage firewall configurations within the SpaceX enterprise network based on operational requirements Analyze and proactively come up with creative network solutions for operational needs that present security challenges Work with other SpaceX teams to determine functional needs, develop secure architectures, and communicate security best practices and policies BASIC QUALIFICATIONS: Bachelor’s degree in a STEM field and 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree 3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIs PREFERRED SKILLS AND EXPERIENCE: Expert understanding of network security technologies, their operation and limitations, including: Firewalls (Palo Alto and Juniper) Configuring complex eBGP fabrics. Must know how to design a large complex multi-path network from scratch. Having seen someone else configure it does not count. Switch/router ACLs Network access control solutions IPSec and TLS based VPNs Web application firewalls Email security Logging and alerting with SIEMs Familiarity with networking protocols and the OSI model Experience testing and implementing changes in a production environment Adept at learning new technologies and systems Strong self-starting and time-management skills Excellent communication skills, both written and verbal ADDITIONAL REQUIREMENTS: This role requires you to be onsite. Hybrid or remote work will not be considered. Willingness to work extended hours and weekends as needed. ITAR REQUIREMENTS: To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here. SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status. Applicants wishing to view a copy of SpaceX’s Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to EEOCompliance@spacex.com.