Senior Network Security Engineer

Valar Atomics•Torrance, CA

About The Position

Valar Atomics is seeking a hands-on Senior Network Security Engineer to design, implement, and maintain our enterprise network security infrastructure. This role focuses heavily on Palo Alto Networks firewall administration, secure remote access via GlobalProtect VPN, cloud connectivity across Azure and AWS, and network access control for wired, wireless, and IoT devices. The ideal candidate combines deep firewall /routing expertise with practical experience securing endpoints, cameras, and IoT devices through certificate-based (TLS/802.1X) authentication.

Requirements

Proven hands-on experience with Palo Alto Networks firewalls (policy creation, NAT, routing, troubleshooting)
Experience configuring and supporting GlobalProtect VPN
Experience building site-to-site VPN tunnels with Azure and AWS
Working knowledge of 802.1X authentication (wired/wireless) and certificate-based network access
Experience with Ruckus switch configuration and routing
Strong understanding of enterprise routing concepts (static routing, VLANs, inter-VLAN routing)
Solid troubleshooting skills across firewall, VPN, and switching layers
Performed root-cause analysis on wireless access point failures, adjusted AP placement and power/range settings to optimize coverage, and resolved intermittent Wi-Fi connectivity issues.
Skilled in wireless access point diagnostics, RF coverage tuning, and troubleshooting client connectivity and signal degradation issues.

Nice To Haves

Experience with Prisma Access and/or Prisma Cloud
Experience with Palo Alto CASB
Experience with EZPKI / EZRadius or similar Azure-based SaaS RADIUS/PKI/TLS certificate services
Experience deploying TLS/802.1X authentication for IoT devices and IP cameras
Relevant certifications such as PCNSE (Palo Alto Certified Network Security Engineer), CCNP\CCNP Security, or similar
Light automation such ansible, Terraform, Saltstack
Prior military service, particularly in communications, networking, cybersecurity, IT, or other technical fields, is highly valued. Relevant military training and operational experience will be considered alongside civilian industry experience.

Responsibilities

Configure and manage Palo Alto Networks firewall security policies, NAT rules, and threat prevention profiles
Design and implement Palo Alto Firewall routing (static, dynamic, and policy-based routing)
Monitor, troubleshoot, and optimize firewall performance and rule sets
Build, configure, and maintain GlobalProtect VPN for secure remote access
Create and manage site-to-site VPN tunnels between on-premises infrastructure and Azure and AWS environments
Troubleshoot VPN connectivity, tunnel stability, and routing issues across hybrid cloud environments
Integrate and manage EZPKI and EZRadius (Azure-based SaaS RADIUS and SaaS TLS/PKI services) for certificate-based network authentication
Deploy and support TLS-based 802.1X authentication for IP cameras and other IoT devices
Configure 802.1X network access control policies across wired and wireless infrastructure
Configure and maintain routing on Ruckus switches
Support VLAN segmentation, inter-VLAN routing, and network access policies for IoT and camera device segments
Support Prisma (Prisma Access / Prisma Cloud) initiatives as needed
Support Palo Alto CASB deployment and policy configuration as needed

Benefits

Competitive base salary
Equity ownership in a rapidly growing advanced energy company
Comprehensive medical benefits
Unlimited PTO
Free daily lunch provided onsite
Generous PPE stipend
High-impact startup environment with significant ownership and autonomy
Opportunities for rapid career growth and internal advancement
Direct collaboration with experienced operators, engineers, and industry leaders
The opportunity to help build and scale transformative energy technology from the ground up