Senior Network Security Engineer
Join Valar Atomics as a Senior Network Security Engineer to design and maintain enterprise network security infrastructure in a hands-on role.
Posted by employer 2 months ago
First seen on Joblaze 1 month ago
Last verified on the company career page 15 hours ago
Skills & Technologies
Not disclosed in this posting: years of experience, visa sponsorship.
Benefits
Joblaze summary
In the role of Senior Network Security Engineer at Valar Atomics, the individual is responsible for designing, implementing, and maintaining the company's network security infrastructure, with a strong emphasis on Palo Alto Networks firewalls and secure remote access solutions. Key skills include expertise in firewall management, VPN configuration, and certificate-based authentication for IoT devices. This position is ideal for seasoned professionals with a background in network security, particularly those with military experience in communications or cybersecurity. Valar Atomics offers a dynamic startup environment focused on innovative energy solutions.
Joblaze insights
- Listed about a month ago — first seen on Joblaze September 3, 2026. Last confirmed on Valar Atomics's careers page October 29, 2026.
- Salary band is in line with the typical range for Security roles (median ~$170,000).
- Starts above 32% of 65 comparable senior security roles in United States that list AWS we track (median $180,000 across 43 companies). See AWS salary trends
- AWS appears in 26.7% of 345 comparable senior security roles in United States; TLS appears in 1.7% of 345 comparable senior security roles in United States.
Quick facts
- Is the Senior Network Security Engineer role remote?
- No — this is an on-site role in Torrance, California, United States.
- What's the salary range?
- Valar Atomics lists $160,000–$180,000 for this role.
- Where is the role based?
- Valar Atomics is hiring for this position in Torrance, California, United States.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: 802.1X, AWS, Azure, GlobalProtect VPN, Palo Alto Networks, Ruckus.
- What seniority level is this role?
- Valar Atomics targets senior candidates for this position.
- Is this full-time or contract?
- Full-time for this Senior Network Security Engineer role at Valar Atomics.
From the original posting
The Team
As part of the Business organization, IT & Enterprise Software delivers the technology infrastructure, enterprise applications, and digital tools that power Valar's operations. The team ensures secure, reliable, and scalable technology solutions that support every function across the company.
The Role
Valar Atomics is seeking a hands-on Senior Network Security Engineer to design, implement, and maintain our enterprise network security infrastructure. This role focuses heavily on Palo Alto Networks firewall administration, secure remote access via GlobalProtect VPN, cloud connectivity across Azure and AWS, and network access control for wired, wireless, and IoT devices. The ideal candidate combines deep firewall/routing expertise with practical experience securing endpoints, cameras, and IoT devices through certificate-based (TLS/802.1X) authentication. This position is fully on-site at our Torrance, CA location.
Key Responsibilities
Firewall & Network Security
- Configure and manage Palo Alto Networks firewall security policies, NAT rules, and threat prevention profiles
- Design and implement Palo Alto Firewall routing (static, dynamic, and policy-based routing)
- Monitor, troubleshoot, and optimize firewall performance and rule sets
VPN & Cloud Connectivity
- Build, configure, and maintain GlobalProtect VPN for secure remote access
- Create and manage site-to-site VPN tunnels between on-premises infrastructure and Azure and AWS environments
- Troubleshoot VPN connectivity, tunnel stability, and routing issues across hybrid cloud environments
Identity, Certificates & Access Control
- Integrate and manage EZPKI and EZRadius (Azure-based SaaS RADIUS and SaaS TLS/PKI services) for certificate-based network authentication
- Deploy and support TLS-based 802.1X authentication for IP cameras and other IoT devices
- Configure 802.1X network access control policies across wired and wireless infrastructure
- Integrate and manage AWS CA and AWS PKI infrastructure
Switching & LAN Infrastructure
- Configure and maintain routing on Ruckus switches
- Support VLAN segmentation, inter-VLAN routing, and network access policies for IoT and camera device segments
Cross-Functional / Nice-to-Have
- Support Prisma (Prisma Access / Prisma Cloud) initiatives as needed
- Support Palo Alto CASB deployment and policy configuration as needed
Basic Qualifications
- Proven hands-on experience with Palo Alto Networks firewalls (policy creation, NAT, routing, troubleshooting)
- Experience configuring and supporting GlobalProtect VPN
- Experience building site-to-site VPN tunnels with Azure and AWS
- Working knowledge of 802.1X authentication (wired/wireless) and certificate-based network access
- Experience with Ruckus switch configuration and routing
- Strong understanding of enterprise routing concepts (static routing, VLANs, inter-VLAN routing)
- Solid troubleshooting skills across firewall, VPN, and switching layers
- Performed root-cause analysis on wireless access point failures, adjusted AP placement and power/range settings to optimize coverage, and resolved intermittent Wi-Fi connectivity issues.
- Skilled in wireless access point diagnostics, RF coverage tuning, and troubleshooting client connectivity and signal degradation issues.
Preferred Skills and Experience
- Experience with Prisma Access and/or Prisma Cloud
- Experience with CMMC2
- Prior military service in US Airforce or Navy, particularly in communications, networking, cybersecurity, IT, or other technical fields, is highly valued. Relevant military training and operational experience will be considered alongside civilian industry experience.
- Experience with Palo Alto CASB
- Experience with EZPKI / EZRadius or similar Azure-based SaaS RADIUS/PKI/TLS certificate services
- Experience deploying TLS/802.1X authentication for IoT devices and IP cameras
- Relevant certifications such as PCNSE (Palo Alto Certified Network Security Engineer), CCNP\CCNP Security, or similar
- Light automation such ansible, Terraform, Saltstack
What Success Looks Like
- Firewall policies and routing are well-organized, documented, and optimized for security and performance
- GlobalProtect VPN provides reliable, secure remote access for all authorized users
- Site-to-site tunnels to Azure and AWS are stable and properly monitored
- Certificate-based authentication (EZPKI/EZRadius) is integrated smoothly with minimal access disruptions
- IoT devices and cameras are securely onboarded via 802.1X/TLS with minimal friction
- Ruckus switch routing is stable and correctly segmented across the network
What We Offer
- Competitive base salary
- Equity ownership in a rapidly growing advanced energy company
- Comprehensive medical benefits
- Unlimited PTO
- Free daily lunch provided onsite
- Generous PPE stipend
- High-impact startup environment with significant ownership and autonomy
- Opportunities for rapid career growth and internal advancement
- Direct collaboration with experienced operators, engineers, and industry leaders
- The opportunity to help build and scale transformative energy technology from the ground up
Standard company text repeated across Valar Atomics's postings is omitted here.