Staff Network Security Engineer

Were Cruise, a self–driving service designed for the cities we love.We're building the world's most advanced self–driving vehicles to safely connect people to the places, things, and experiences they care about. We believe self–driving vehicles will help save lives, reshape cities, give back time in transit, and restore freedom of movement for many.In our cars, you're free to be yourself. It's the same here at Cruise. We're creating a culture that values the experiences and contributions of all of the unique individuals who collectively make up Cruise, so that every employee can do their best work.Cruise is committed to building a diverse, equitable, and inclusive environment, both in our workplace and in our products. If you are looking to play a part in making a positive impact in the world by advancing the revolutionary work of self–driving cars, come join us. Even if you might not meet every requirement, we strongly encourage you to apply. You might just be the right candidate for us.Cruise's Network Access Engineering team is seeking a Staff Network Security Engineer to help us architect, build and operate secure, scalable access networks across our growing global footprint of facilities.You will be essential for ensuring Cruise's network designs are secure and that we have an effective, consolidated network automation strategy encompassing observability, device lifecycle management, security policy and vulnerability remediation.You are a network security SME with strong, influential opinions on networking and network access security, ensuring Cruise's network architectures have security baked–in as a basis of their designs.Your scope includes (but is not limited to): Identity management, access–layer network controls, policy management & enforcement, remote client VPN system strategy & architecture, endpoint vulnerability identification & remediation, and edge access policy dissemination.If you're interested in building and operating the global network that supports our autonomous driving mission, let's talk!What you'll be doing:

Create and maintain standards–based network designs for Cruise's access network infrastructureShape a convergence strategy for our current mix of Cisco, Arista, Palo Alto, Fortinet and Aruba network equipment that exist across disparate network teamsCreate, manage, and maintain access network infrastructure documentationIdentify, build and mature common access network workflows and designHelp build, maintain, and automate Cruise's global network, focusing on secure authentication and authorization mechanismsOwn the remediation of security vulnerabilities, including implementing network access controls through systems like Cisco ISE and/or FreeRADIUSDesign and implement robust network security policies and procedures through centralized management and automation of network devicesParticipate in an on–call rotationWhat you must have:

Experience running and guiding network operations and observability initiativesSenior resource in a network operations team supporting Cisco, Arista, Palo Alto, Fortinet and Aruba platformsExpertise in engineering and deploying access layer connectivity (wired Ethernet & WiFi wireless access) and their policies via scalable automation (CI/CD)Expertise in managing and utilizing network monitoring systems and integrating them for automation consumption and triggeringExpert knowledge of network security best–practices and design patternsExperience with understanding of SRE best practices and experience with publishing service SLOsHands–on knowledge and troubleshooting experience of L2 and L3 networking and routing protocols (802.11x, STP, IPv4, IS–IS, BGP, etc.)Expert level knowledge of edge firewall technologies, remote VPN solutions, and SASE & SD–WAN architecturesExpert experience with engineering and delivering solutions in 3 or more of the following automation languages and platforms/technologies such as: Terraform, GitHub, Python, GoLang, Jupyter, Batfish, Docker, K8s and AnsibleBonus Points:

Strong experience deploying multiple NAC solutions and experience as part of segmentation solutionsDeep hands–on experience with Cloud deployments in all major cloud vendors GCP, AWS and AzureExperience with automation platforms/technologies logging services: Chronosphere, HumioExperience with leading introduction and adoption of DevOps best practicesThe salary range for this position is $173,400 – $255,000. Compensation will vary depending on location, job–related knowledge, skills, and experience. You may also be offered a bonus, long–term incentives, and benefits. These ranges are subject to change.Why Cruise?

Our benefits are here to support the whole you:Competitive salary and benefitsMedical / dental / vision, Life and AD&DSubsidized mental health benefitsPaid time off and holidaysPaid parental, medical, family care, and military leave of absence401(k) Cruise matching programFertility benefitsDependent Care Flexible Spending AccountFlexible Spending Account & Health Saving AccountPerks Wallet program for benefits/perksPre–tax Commuter benefit plan for local employeesCruiseFlex, our location–flexible work policy.We're Integrated

Through our partnerships with General Motors and Honda, we are the only self–driving company with fully integrated manufacturing at scale.We're Funded

GM, Honda, Microsoft, T. Rowe Price, and Walmart have invested billions in Cruise. Their backing for our technology demonstrates their confidence in our progress, team, and vision and makes us one of the leading autonomous vehicle organizations in the industry. Our deep resources greatly accelerate our operating speed.Cruise LLC is an equal opportunity employer. We strive to create a supportive and inclusive workplace where contributions are valued and celebrated, and our employees thrive by being themselves and are inspired to do the best work of their lives. We seek applicants of all backgrounds and identities, across race, color, caste, ethnicity, national origin or ancestry, age, citizenship, religion, sex, sexual orientation, gender identity or expression, veteran status, marital status, pregnancy or parental status, or disability. Applicants will not be discriminated against based on these or other protected categories or social identities. Cruise will consider for employment qualified applicants with arrest and conviction records, in accordance with applicable laws.Cruise is committed to the full inclusion of all applicants. If reasonable accommodation is needed to participate in the job application or interview process please let our recruiting team know.Candidates applying for roles that operate and remotely operate the AV:

Licensed to drive a motor vehicle in the U.S. for the three years immediately preceding your application, currently holding an active in–state regular driver's license or equivalent, and no more than one point on driving record. A successful completion of a background check, drug screen and DMV Motor Vehicle Record check is also required.Note to Recruitment Agencies:

Cruise does not accept unsolicited agency resumes. Furthermore, Cruise does not pay placement fees for candidates submitted by any agency other than its approved partners.No Application Deadline

#J-18808-Ljbffr