Robotics Technologies is hiring a Security Engineer to support the daily operation and ongoing upkeep of Zoox’s network security systems, plus deliver scoped buildout projects. This is a hands-on engineering and administration role working directly under the Zoox Information Security team, with a hybrid schedule in Sunnyvale, CA (three days per week onsite).
This contract position is designed for engineers who prefer practical security operations, clear documentation, and structured change management. You will help keep security controls current and responsive while supporting multiple network access and traffic inspection use cases.
Responsibilities
- Administer next-gen firewall / UTM platforms including policy updates, rule lifecycle and cleanup, software and signature updates, and certificate renewals
- Operate URL filtering and Layer-7 inspection policies, including category tuning and exception handling
- Perform IDS/IPS tuning with signature management, work to reduce false positives, and escalate confirmed detections to the security operations team
- Support 802.1X network access control, including supplicant and authentication troubleshooting, certificate and policy issues, and onboarding new device types
- Support remote access VPN via client troubleshooting, access and split-tunnel policy changes, and availability monitoring
- Manage a ticket queue to SLA, providing clear written updates to requesters
- Maintain runbooks, network diagrams, and configuration documentation
- Assist with 802.1X expansion to additional sites and device classes through design, pilot, phased rollout, and handoff documentation
- Support network segmentation and SSL Decryption enforcement by designing and enforcing applicable policies
Requirements
- 5+ years of network security engineering supporting production environments
- 5+ years of IT systems or application engineering and administration
- Strong working knowledge of all layers of the OSI model
- Hands-on experience with Layer-7 protection techniques including application control, TLS inspection, IPS, and URL and DNS filtering
- Direct experience administering enterprise NGFW/UTM platforms (vendors you run must be named)
- Experience implementing and supporting 802.1X wired and wireless NAC
- Experience with enterprise remote access VPN
- Demonstrated experience operating within a formal change management process
- Clear written and verbal communication, and the ability to work across Information Security, IT, Product, and Operations teams
Project Responsibilities (Scoped Deliverables)
- The contractor will also be assigned scoped project work
- Anticipated projects will be defined with a written statement of work, acceptance criteria, and a target completion date before work begins
Location: Sunnyvale, CA (hybrid, three days onsite)  | Job type: contract  | Compensation: USD 78 per hour  | Minimum experience: 5 years
Technology focus: next-gen firewall, UTM, URL filtering, Layer-7 inspection policies, IDS/IPS, 802.1X, network access control, remote access VPN, TLS inspection, IPS, URL and DNS filtering, NGFW/UTM platforms, NAC, SSL Decryption, OSI model
