Senior Network Engineer

LeoLabs

Senior Network Engineer at LeoLabs designing secure network architecture for space operations. Leading efforts in SASE/ZTNA, NAC, and telemetry to enhance network security.

Posted 6/2/2026full-timeRemote • 🇺🇸 United StatesSeniorWebsite

Tech Stack

Tools & technologies

AWSAzureCloudDNSFirewallsSwitching

About the role

Key responsibilities & impact

Design and implement secure network patterns that enforce identity, device posture, segmentation, logging, and policy-based access across users, sites, workloads, and administrative paths.
Implement and support SASE/ZTNA capabilities, including Cloudflare Government or comparable platforms, WARP/client access, private application access, gateway policies, DNS controls, and secure administrative access paths.
Help eliminate direct public administrative access to workloads by routing privileged access through approved identity-aware and policy-enforced access layers.
Develop network designs that support the principle that no workload, management interface, or privileged access path bypasses identity, policy, segmentation, and telemetry controls.
Lead the design and rollout of Network Access Control for office, edge, and remote site environments.
Implement or support 802.1X, RADIUS policy, device certificates, VLAN segmentation, and port-level admission control.
Segment remote site networks into appropriate zones, such as telemetry, management, vendor/service, and out-of-band management networks.
Design secure remote site connectivity using IPSec/private tunnels, certificate-based authentication, route controls, firewall policies, and deterministic telemetry paths.
Ensure edge and radar-site environments have no unnecessary public management exposure.
Implement firewall forwarding, tunnel telemetry, configuration backup, drift detection, and site-level logging into centralized monitoring and SIEM platforms.
Support data-source onboarding for firewall logs, VPN/IPSec logs, SASE logs, NAC events, DNS logs, VPC/NSG flow logs, and remote site device logs.
Create and maintain network diagrams, firewall rule documentation, routing designs, NAC policies, tunnel inventories, access paths, and operational runbooks.

Requirements

What you’ll need

Must be eligible to obtain and maintain a U.S. personnel security clearance
5+ years of hands-on network engineering experience in enterprise, hybrid cloud, regulated, or security-focused environments.
Strong experience with routing, switching, firewalling, VPNs, segmentation, DNS, NAT, TLS, certificates, and secure network design.
Hands-on experience with firewall policy management, IPSec tunnels, site-to-site VPNs, route control, and secure edge connectivity.
Experience implementing or operating NAC technologies, including 802.1X, RADIUS, VLAN assignment, device profiling, or certificate-based access.
Experience supporting remote-access or Zero Trust access platforms such as Cloudflare, Zscaler, Palo Alto Prisma Access, Cisco Secure Access, or similar.
Experience integrating network logs into SIEM or monitoring platforms.
Working knowledge of cloud networking concepts in AWS and/or Azure, including VPCs/VNets, routing, security groups, NACLs, private endpoints, flow logs, transit gateways, vWAN, or cloud firewalls.
Ability to write clear technical documentation, diagrams, implementation plans, runbooks, and operational procedures.
Strong troubleshooting skills across network, identity, endpoint, cloud, and application access layers.

Benefits

Comp & perks

Global workforce: flexible remote/hybrid opportunities
Work on complex, meaningful missions with real-world impact
Unlimited paid time off for most roles
Competitive salary and equity packages
Comprehensive health, dental, and vision coverage
Access to the forefront of commercial space operations and defense innovation

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

network engineeringroutingswitchingfirewallingVPNssegmentationDNSNATTLSsecure network design

Soft Skills

troubleshootingtechnical documentationclear communicationimplementation planningoperational procedures

Certifications

U.S. personnel security clearance