Tesla

Makes electric cars, robotaxis and grid batteries

Network Engineer - Zero Trust

Network Engineering & AdministrationConfirmed live in the last 24 hours

Full-timePalo Alto, CA, USANo salary listedIn-person

About the Job

Requirements

Five or more years of network engineering experience focused on enterprise security architectures.
Three or more years of hands-on experience with Zero Trust network technologies such as Zscaler ZIA/ZPA, ZTNA, and/or microsegmentation platforms.
Strong understanding of Zero Trust principles, including microsegmentation, least-privilege network access, continuous verification, and identity-aware networking.
Deep expertise in TCP/IP, DNS, HTTP/S, TLS/SSL, VPN technologies including IPSec and GRE, and proxy architectures.
Experience with enterprise-scale microsegmentation platforms such as Akamai Guardicore, Illumio, and/or VMware NSX.
Proficiency with network analysis tools such as Wireshark, tcpdump, nslookup, and traceroute, and traffic flow analysis.
Experience with enterprise network infrastructure, including firewalls such as Palo Alto and Fortinet, F5 load balancers, SD-WAN, and DNS.
Understanding of OT/ICS network segmentation requirements for manufacturing environments.
Experience with cloud networking, including Azure VNets, AWS VPCs, and/or GCP, and hybrid connectivity; familiarity with network automation using Terraform, Ansible, and/or Python.
A degree in Computer Science or Network Engineering, or equivalent experience.
Strong cross-layer troubleshooting skills and clear written and verbal communication.

Responsibilities

Design and implement network architectures that enforce Zero Trust principles, including microsegmentation, ZTNA, and identity-aware traffic policies.
Configure and manage network-layer components of Zero Trust platforms, including Zscaler ZIA/ZPA tunnels, Guardicore policies, GRE/IPSec, and PAC files.
Develop and maintain microsegmentation policies with Akamai Guardicore across datacenter, manufacturing, and cloud environments.
Manage connectivity between Tesla global sites and Zero Trust cloud services, including traffic steering, split tunneling, and bandwidth optimization.
Design and enforce network access policies based on identity, device posture, application sensitivity, and location.
Troubleshoot complex Zero Trust network issues involving proxies, SSL/TLS inspection, DNS, certificates, routing, and client-to-application connectivity, including packet-level analysis.
Partner with firewall, load balancer, and DNS teams to integrate Zero Trust policies with existing network infrastructure.
Develop IT/OT segmentation strategies for manufacturing environments and maintain isolation between IT and OT networks.
Monitor Zero Trust network performance and inspection latency, and optimize traffic paths to protect user experience.
Document topologies, segmentation maps, traffic flows, and policy rule sets, and participate in 24/7 on-call as required.

Category	Engineering & Information Technology
Location	PALO ALTO, California
Requisition ID	281414
Type	Full-time

Job Description

<div class="MSWordContent"><p>As a Zero Trust Network Engineer, you will be responsible for designing, implementing, and managing the network-layer controls that enforce Tesla's Zero Trust Architecture across a global enterprise environment. You will own network segmentation policies, traffic inspection and routing through Zero Trust proxies, microsegmentation enforcement, and network connectivity for Zero Trust platforms. Your work will ensure that Tesla's network infrastructure enforces least-privilege access at every layer, from datacenter east-west traffic to remote user connectivity.</div>

Job Responsibilities

Design and implement network architectures that enforce Zero Trust principles, including microsegmentation, ZTNA, and identity-aware traffic policies
Configure and manage network-layer components of Zero Trust platforms (Zscaler ZIA/ZPA tunnels, Guardicore policies, GRE/IPSec, PAC files)
Develop and maintain microsegmentation policies with Akamai Guardicore across datacenter, manufacturing, and cloud environments
Manage connectivity between Tesla global sites and Zero Trust cloud services, including traffic steering, split tunneling, and bandwidth optimization
Design and enforce network access policies based on identity, device posture, application sensitivity, and location
Troubleshoot complex Zero Trust network issues spanning proxies, SSL/TLS inspection, DNS, certificates, routing, and client-to-app connectivity (including packet-level analysis)
Partner with firewall, load balancer (F5), and DNS teams so Zero Trust policies integrate cleanly with existing network infrastructure
Develop IT/OT segmentation strategies for manufacturing environments and maintain isolation between IT and OT networks
Monitor Zero Trust network performance and inspection latency; optimize traffic paths to protect user experience
Document topologies, segmentation maps, traffic flows, and policy rule sets; participate in 24/7 on-call as required

Job Requirements

5+ years of network engineering experience with a focus on enterprise security architectures
3+ years hands-on with Zero Trust network technologies (Zscaler ZIA/ZPA, ZTNA, and/or microsegmentation platforms)
Strong understanding of Zero Trust principles: microsegmentation, least-privilege network access, continuous verification, identity-aware networking
Deep expertise in TCP/IP, DNS, HTTP/S, TLS/SSL, VPN (IPSec, GRE), and proxy architectures
Experience with microsegmentation platforms (Akamai Guardicore, Illumio, and/or VMware NSX) at enterprise scale
Proficiency with network analysis tools (Wireshark, tcpdump, nslookup, traceroute) and traffic flow analysis
Experience with enterprise network infrastructure: firewalls (Palo Alto, Fortinet), load balancers (F5), SD-WAN, and DNS
Understanding of OT/ICS network segmentation requirements for manufacturing environments
Experience with cloud networking (Azure VNets, AWS VPCs, and/or GCP) and hybrid connectivity; familiarity with network automation (Terraform, Ansible, and/or Python)
Degree in Computer Science, Network Engineering, or equivalent experience; strong cross-layer troubleshooting and clear written/verbal communication

About the Company

Tesla

Makes electric cars, robotaxis and grid batteries

Tesla makes electric cars and batteries that store power for homes and utilities, and it develops self-driving software and humanoid robots. In 2023, its Model Y became the first electric vehicle to rank as the world's best-selling car. Buyers order the Model 3 sedan, Model Y SUV, or Cybertruck pickup directly from Tesla instead of through dealers, and they charge on its Supercharger fast-charging network. It also sells Megapack and Powerwall batteries, runs a robotaxi service, and charges drivers a monthly fee for self-driving software that still needs their supervision. Tesla was founded in 2003, with Elon Musk as its lead early investor and a recognized co-founder, and it is based in Austin, Texas.

Company size: 10,001+
Company stage: IPO
Headquarters: Austin, TX
Founded: 2003

Recently Posted Jobs

Explore more opportunities at Tesla

See more jobs