Staff Network Security Architect

The role

You will own the network security reference architecture across corporate, data center, lab and edge environments. You will act as the security design authority for new infrastructure, setting standards that other teams build to.

What you will do

• Own the network security reference architecture across corporate, data center, lab/OT and edge environments
• Serve as security design authority for new infrastructure, running design reviews and threat models
• Translate NIST CSF 2.0, NIST 800-53 and ISO 27001 into engineering standards and reference patterns
• Define the zero-trust and identity-to-network strategy, including 802.1X, PKI, ZTNA and non-human asset authentication
• Architect secure hybrid and multi-cloud connectivity and define where inspection, enforcement and logging belong
• Encode standards as Terraform modules, policy-as-code and CI/CD guardrails
• Own data flow and trust boundary analysis for vehicle data, lab telemetry and vendor connectivity
• Own risk articulation for leadership, exception decisions, architecture decision records and the multi-year roadmap
• Set technical direction through mentorship, design review and written standards

Required qualifications

• 10+ years in network and security engineering
• 4+ years in an architecture or technical-lead role where you owned designs others implemented
• Demonstrated ownership of an enterprise-scale segmentation or zero-trust architecture from concept through adoption
• Fluency with NIST CSF 2.0, NIST 800-53 and ISO 27001, and turning them into engineering standards
• Depth in threat modeling and secure-by-design for network and infrastructure
• Platform grounding in next-gen firewalls, AWS NFW, IDS/IPS, NAC/802.1X, PKI, VPN and ZTNA
• Core protocol knowledge: TCP/IP, BGP, OSPF, VLAN, TLS/PKI
• Cloud network security depth in AWS and/or GCP, including inspection architecture and Terraform

Nice to have

• OT, ICS, robotics, automotive or manufacturing network security experience (IEC 62443, Purdue model)
• Autonomous vehicle or safety-critical systems exposure
• Certifications: CISSP-ISSAP, SABSA, TOGAF, CCIE Security, PCNSE, AWS Security Specialty
• Experience applying AI/ML to network or cloud security

Before you apply

• Accommodations available on request via accommodations@zoox.com or your assigned recruiter
• You do not need to match every listed expectation to apply

About the company

Zoox is developing the first ground-up, fully autonomous vehicle fleet and the supporting ecosystem to bring it to market. It aims to provide next-generation mobility-as-a-service in urban environments.