Staff Network Security Engineer, Cruise

• You are a network security SME with strong, influential opinions on networking and network access security, ensuring Cruise's network architectures have security baked-in as a basis of their designs
• If you're interested in building and operating the global network that supports our autonomous driving mission, let's talk!
• Experience running and guiding network operations and observability initiatives
• Senior resource in a network operations team supporting Cisco, Arista, Palo Alto, Fortinet and Aruba platforms
• Experience deploying and operating wired Ethernet & WiFi wireless access networks
• Expertise in managing and utilizing network monitoring systems
• Expert knowledge of network security best-practices and design patterns
• Demonstrated hands-on network design and operations experience
• Hands-on knowledge and troubleshooting experience of L2 and L3 networking and routing protocols (802.11x, STP, IPv4, IS-IS, BGP, etc.)
• Expert level knowledge of edge firewall technologies, remote VPN solutions, and SASE & SD-WAN architectures
• Experience with automation platforms/technologies such as: Terraform, GitHub and Ansible

Desirable

• Cruise’s Network Access Engineering team is seeking a Staff Network Security Engineer to help us architect, build and operate secure, scalable access networks across our growing global footprint of facilities.
• You will be essential for ensuring Cruise’s network designs are secure and that we’ve an effective, consolidated network automation strategy encompassing observability, device lifecycle management, security policy and vulnerability remediation
• Your scope includes (but not limited to): Identity management, access-layer network controls, policy management & enforcement, remote client VPN system strategy & architecture, endpoint vulnerability identification & remediation, and edge access policy dissemination
• Create and maintain standards-based network designs for Cruise’s access network infrastructure
• Shape a convergence strategy for our current mix of Cisco, Arista, Palo Alto, Fortinet and Aruba network equipment that exist across disparate network teams
• Create, manage, and maintain access network infrastructure documentation
• Identify, build and mature common access network workflows and design
• Help build, maintain, and automate Cruise’s global network, focusing on secure authentication and authorization mechanisms
• Own the remediation of security vulnerabilities, including implementing network access controls through systems like Cisco ISE and/or FreeRADIUS
• Design and implement robust network security policies and procedures through centralized management and automation of network devices
• Participate in an on-call rotation