Sr. Network Security Engineer (Firewalls)

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.SR. NETWORK SECURITY ENGINEERSpaceX is looking for a Sr. Network Engineer (Firewalls) with a wealth of experience with networking on platforms such as Palo Alto, Checkpoint, Juniper and Arista. This employee will be a member of the Security Engineering team within the larger Information Technology department. The ideal candidate will be flexible, excel at multi-tasking, and flourish in a fast-paced and challenging environment. This person should be a self-starter, self-motivator and possess the ingenuity to excel in this position.RESPONSIBILITIES:Serve as the primary owner of Layer 3 networking on firewallsConfigure, design and managed complex networks supporting Mission networks, factory networks and corporate networksProvide subject matter expertise on network security, firewalls and industry best practicesManage firewall configurations within the SpaceX enterprise network based on operational requirementsAnalyze and proactively come up with creative network solutions for operational needs that present security challengesWork with other SpaceX teams to determine functional needs, develop secure architectures, and communicate security best practices and policiesBASIC QUALIFICATIONS:Bachelor's degree in a STEM field and 5+ years of network security experience; OR 8+ years of network security experience in lieu of a degree3+ years of experience securing networks, IT infrastructure, applications, endpoints, and/or APIsPREFERRED SKILLS AND EXPERIENCE:Expert understanding of network security technologies, their operation and limitations, including:Firewalls (Palo Alto and Juniper)Configuring complex eBGP fabrics. Must know how to design a large complex multi-path network from scratch. Having seen someone else configure it does not count.Switch/router ACLsNetwork access control solutionsIPSec and TLS based VPNsWeb application firewallsEmail securityLogging and alerting with SIEMsFamiliarity with networking protocols and the OSI modelExperience testing and implementing changes in a production environmentAdept at learning new technologies and systemsStrong self-starting and time-management skillsExcellent communication skills, both written and verbalADDITIONAL REQUIREMENTS:This role requires you to be onsite. Hybrid or remote work will not be considered.Willingness to work extended hours and weekends as needed.ITAR REQUIREMENTS:Learn more about the ITAR here. SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.Applicants wishing to view a copy of SpaceX's Affirmative Action Plan for veterans and individuals with disabilities, or applicants requiring reasonable accommodation to the application/interview process should reach out to