Sr. Network Security Engineer

Description

We are seeking an experienced Network Security Engineer to design, implement, and manage robust network security solutions with a primary focus on firewall technologies, network security architecture, firewall policy management, and regulatory/compliance requirements. The ideal candidate will ensure the protection of our enterprise network infrastructure against evolving threats while maintaining high availability, performance, and adherence to industry standards and compliance frameworks (e.g., PCI-DSS, ISO 27001, NIST, SOC 2, GDPR, HIPAA, or others as applicable).

Responsibilities

• Design, architect, and implement secure network topologies, segmentation (including Zero Trust principles), and defense-in-depth strategies
• Lead firewall and network security solution designs for on-premises, hybrid, and cloud environments
• Evaluate, select, and deploy next-generation firewalls (NGFWs), web application firewalls (WAFs), and related security appliances. Develop secure network designs for new projects, data centers, remote access (VPN/SASE/ZTNA), and connectivity solutions
• Own end-to-end firewall rule/policy lifecycle: creation, review, optimization, implementation, and decommissioning. Perform regular firewall rule base audits, cleanup of unused/overly permissive rules, and risk assessments
• Manage multi-vendor firewall environments (e.g., Palo Alto Networks, Fortinet, Cisco ASA/Firepower, Check Point, Juniper)
• Implement and maintain centralized policy management, change control processes, and automation where possible (e.g., via Panorama, FortiManager, or scripting)
• Troubleshoot complex firewall and connectivity issues related to security policies
• Ensure firewall configurations, network designs, and security controls meet internal policies and external regulatory/compliance requirements
• Support audits, evidence collection, and remediation activities for security compliance frameworks
• Monitor firewall and network security health, performance, and logs; respond to and investigate security events/incidents. Integrate firewalls with SIEM, SOAR, threat intelligence, and vulnerability management tools

Requirements

• Bachelor’s Degree in Computer Science, Information Technology, Cybersecurity, or related field or equivalent practical experience
• 5+ years of hands-on experience in network security engineering, with strong emphasis on firewalls and network design
• Deep expertise in next-generation firewalls (configuration, policies, troubleshooting, HA/clustering) — preferably Palo Alto, Fortinet, or Cisco
• Proven experience designing secure network architectures and implementing network segmentation/micro-segmentation
• Strong knowledge of firewall policy management best practices, including least privilege, rule optimization, and change management
• Solid understanding of networking fundamentals (TCP/IP, routing, switching, VPN, DNS, DHCP, load balancing) and security protocols
• Experience with compliance frameworks and translating requirements into technical controls (e.g., PCI-DSS, NIST CSF, ISO 27001)
• Proficiency with security monitoring, logging, and analysis tools. Excellent documentation, communication, and stakeholder management skills
• Relevant certifications strongly preferred: PCNSA/PCNSE, FCP/FCX, CCNP Security, CISSP, CCSP, Security+, or equivalent

Compensation and Benefits

Benefits

Along with competitive pay, as a full-time Tesla employee, you are eligible for the following benefits at day 1 of hire:

• Medical plans > plan options with $0 payroll deduction
• Family-building, fertility, adoption and surrogacy benefits
• Dental (including orthodontic coverage) and vision plans, both have options with a $0 paycheck contribution
• Company Paid (Health Savings Accounts) HSA Contribution when enrolled in the High-Deductible medical plan with HSA
• Healthcare and Dependent Care Flexible Spending Accounts (FSA)
• 401(k) with employer match, Employee Stock Purchase Plans, and other financial benefits
• Company paid Basic Life, AD&D
• Short-term and long-term disability insurance (90 day waiting period)
• Employee Assistance Program
• Sick and Vacation time (Flex time for salary positions, Accrued hours for Hourly positions), and Paid Holidays
• Back-up childcare and parenting support resources
• Voluntary benefits to include: critical illness, hospital indemnity, accident insurance, theft & legal services, and pet insurance
• Weight Loss and Tobacco Cessation Programs
• Tesla Babies program
• Commuter benefits
• Employee discounts and perks program