Network Security Engineer

The role

You will own the design and implementation of the network security posture end to end. You will work with the infrastructure team to harden physical and virtual networks and build detection and response capabilities.

What you will do

• Design and implement a zero-trust network architecture across on-prem datacenters, multiple office locations, and multi-cloud platforms
• Define and enforce network segmentation policies
• Deploy, tune, and operate NDR, IDS/IPS, and next-generation firewalls
• Build automation for firewall rules, ACLs, and routing policies
• Integrate and operate EDR/XDR, MDM/MAM, SASE, and CASB tooling
• Own the vulnerability management process for network-layer exposure
• Lead incident response for network-layer security events
• Partner with legal, compliance, and leadership to support regulatory requirements
• Architect and deploy network segmentation for HPC clusters
• Architect and deploy a ZTNA-based corporate network

Required qualifications

• Deep, broad networking expertise including packet analysis, firewall log forensics, BGP configuration, multi-cloud networking, and CASB/SASE integration
• Hands-on experience with the Fortinet ecosystem including firewalls, FortiSASE, FortiAPs, and switches
• Experience with Arista switch platforms including configuration and EOS automation
• Experience treating security as an engineering discipline using code and automation
• Experience securing high-value compute environments such as datacenters, HPC clusters, or semiconductor design environments
• Experience deploying and integrating EDR/XDR, MDM/MAM, SASE, and CASB tooling
• Experience building or operating ZTNA-based access models
• Ability to own domain with minimal oversight
• Strong Linux fundamentals including iptables/nftables, network namespaces, and eBPF
• Experience building or operating network security monitoring at scale
• Ability to communicate risk to technical peers and non-technical leadership

Nice to have

• Experience with EDA environments or semiconductor IP security
• Familiarity with cloud-native network security controls on AWS, GCP, or Azure
• Background in or exposure to NIST, SOC 2, or ISO 27001 frameworks
• Experience with eBPF-based network observability and security tooling

Benefits

• Medical, dental, and vision packages with generous premium coverage
• $500 per month credit for waiving medical benefits
• Housing subsidy of $2,500 per month for those living within walking distance of the office
• Relocation support for those moving to San Jose (Santana Row)
• Various wellness benefits covering fitness, mental health, and more
• Daily lunch and dinner in our office
• Unlimited compute budget subject to ROI justification

About the company

Etched is building hardware for frontier intelligence by co-designing chips, racks, software, and manufacturing. They are a fully in-person team in San Jose (Santana Row).