Calix is a company that empowers Communication Service Providers (CSPs) to innovate and grow through their cloud-first, AI-powered platform. The Principal Network Security Engineer (Cloud) will lead the architecture and optimization of network security controls in Google Cloud Platform environments, ensuring the protection of cloud-based assets while collaborating with various teams and mentoring junior engineers.
Responsibilities:
- Lead the architecture, deployment, and optimization of network security controls and solutions in Google Cloud Platform (GCP) environments
- Design and implement security policies, segmentation strategies, firewalls, and access controls to protect cloud-based assets
- Collaborate with the Cloud Platform Engineering, SRE, and Application teams to integrate security into cloud-native solutions and workflows
- Perform risk assessments, vulnerability analysis, and threat modeling for cloud networks
- Monitor, analyze, and respond to security incidents and anomalies within GCP networks, leveraging SIEM/SOAR/XDR/NGFW/DLP and other security tools
- Develop and maintain automation scripts and infrastructure-as-code (IaC) for consistent security deployment and compliance
- Ensure adherence to regulatory/compliance requirements (e.g., SOC2, ISO27K, GDPR) and internal policies for cloud network security
- Mentor and provide technical leadership to junior engineers and cross-functional teams
- Stay current with emerging cloud security technologies, trends, and threats
- Contribute to the development of security standards, best practices, and documentation for Calix Cloud environments
Requirements:
- Bachelor's or Master's degree in Computer Science, Information Security, Engineering, or related field
- 10+ years of experience in network security engineering, with at least 3 years focused on cloud environments, preferably Google Cloud Platform
- Expert knowledge of cloud networking concepts (VPC, subnets, load balancers, NGFW, VPN, interconnect etc.)
- Proficiency in cloud security tools and services (Identity-Aware Proxy, Cloud IAM, Security Command Center, SecOps, DLP etc.)
- Strong understanding of TCP/IP, routing, firewalls, IDS/IPS, zero trust, and segmentation strategies
- Experience with automation and scripting (Python, Terraform/OpenTofu, etc.)
- Solid grasp of security frameworks and compliance standards relevant to cloud environments
- Excellent analytical, problem-solving, and communication skills
- Relevant certifications (e.g., Google Professional Cloud Security Engineer, CISSP, CCSP) highly desirable
- This is a remote-based position located in the United States or Canada. Please note that as part of the recruitment and hiring process, there is an in-person meeting that will take place
- While this is a remote-based position, the candidate may be required to attend in-person team or company meetings
- Experience designing and operating secure cloud environments – preferably Google Cloud
- Knowledge of container security (Kubernetes, GKE) and microservices architectures
- Strong leadership and project management capabilities
- Ability to evangelize security best practices and influence organizational change