Network Security Engineer

Robotics Technologies is hiring a Network Security Engineer for an onsite contract role in Foster City, CA. This hands-on position focuses on keeping production network security systems running smoothly and supporting scoped projects, including 802.1X expansion and network segmentation with SSL decryption enforcement. You will work within an established change-management process, maintain operational clarity through documentation and runbooks, and collaborate across Information Security, IT, Product, and Operations.

What you’ll do

• Administer next-gen firewall (NGFW) / UTM platforms, including policy changes, rule lifecycle and cleanup, software and signature updates, and certificate renewals.
• Operate URL filtering and Layer-7 inspection policies, with category tuning and exception handling.
• Tune IDS/IPS by managing signatures, reducing false positives, and escalating confirmed detections to the security operations team.
• Support 802.1X NAC through supplicant and authentication troubleshooting, resolving certificate and policy issues, and onboarding new device types.
• Support remote access VPN including client troubleshooting, access and split-tunnel policy changes, and availability monitoring.
• Work the ticket queue to SLA, providing clear written updates to requesters.
• Maintain runbooks, network diagrams, and configuration documentation for operational continuity.
• Design, pilot, and execute phased rollouts with handoff documentation for 802.1X expansion to additional sites / device classes.
• Perform network segmentation and SSL decryption enforcement work, including policy design and enforcement.

Required qualifications

• 5+ years of network security engineering supporting production environments.
• 5+ years of IT systems or application engineering and administration.
• Strong working knowledge of all layers of the OSI model.
• Hands-on experience with Layer-7 protection such as application control, TLS inspection, IPS, URL and DNS filtering.
• Direct experience administering enterprise NGFW/UTM platforms (vendors listed in your environment).
• Experience implementing and supporting 802.1X wired and wireless NAC.
• Experience with enterprise remote access VPN.
• Demonstrated experience working inside a formal change management process.
• Clear written and verbal communication and the ability to work across Information Security, IT, Product, and Operations.

Technologies

• Next-gen firewall (NGFW), UTM platforms, URL filtering, Layer-7 inspection, IDS/IPS
• 802.1X, NAC, Remote access VPN, TLS inspection, Application control, IPS, DNS filtering
• Python, Ansible, Terraform

Preferred

• Relevant certifications (e.g., PCNSE, Security+, CISSP).
• IaC, scripting, or automation experience for configuration and reporting (Python, Ansible, Terraform).
• Experience in a regulated or safety-critical environment.

Engagement boundaries and ownership

• The contractor does not set security policy or standards; those remain owned by Zoox Information Security.
• Architecture decisions require Zoox review and approval; the contractor contributes design input and implementation.
• No production changes outside the approved change management window.
• All documentation, configurations, and scripts produced are Zoox work product.

How success is measured

• Ticket SLA attainment and requester satisfaction.
• Change success rate and absence of change-caused incidents.
• Project milestones delivered on agreed dates.
• Completeness and accuracy of documentation at handoff.

Work authorization

• US Citizen, Green Card, OPT-EAD, CPT, H-1B, H4-EAD, Other

Role type: Hands-on engineering and administration role (not advisory).

Compensation: USD 78 per hour.