> Markdown version of [/jobs/ext/2270194-network-engineer-zero-trust](https://www.wearedevelopers.com/jobs/ext/2270194-network-engineer-zero-trust). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Engineer, Zero Trust - **Company:** Tesla Motors - **Location:** Palo Alto, CA, United States - **Experience:** Expert - **Salary:** $140,000.0 - $252,000.0 - **Contract:** Permanent contract - **Skills:** Access Network, Amazon Web Services, Microsoft Azure, Network Analysis, Cloud Computing, Computer Networks, Data Centers, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), Internet Protocol Security (IP SEC), Traceroute, Virtual Private Networks (VPN), Python (Programming Language), Network Architecture, Network Connections, Routing, Network Segmentation, Nslookup, Cloud Services, Ansible, Akamai, Zero Trust Network Access, TCP/IP, Tcpdump, Wireshark, Wide Area Networks, Transport Layer Security, Load Balancing, Cloud Platform System, Firewalls (Computer Science), Information Technology, Fortinet, Terraform, Open Network Automation Platform, Vmware - **Published:** August 27, 2026 - **Apply:** https://jobs.localjobnetwork.com/apply/add/88160715/1 ## About the Role * 5+ years of network engineering experience with a focus on enterprise security architectures * 3+ years hands-on with Zero Trust network technologies (Zscaler ZIA/ZPA, ZTNA, and/or microsegmentation platforms) * Strong understanding of Zero Trust principles: microsegmentation, least-privilege network access, continuous verification, identity-aware networking * Deep expertise in TCP/IP, DNS, HTTP/S, TLS/SSL, VPN (IPSec, GRE), and proxy architectures * Experience with microsegmentation platforms (Akamai Guardicore, Illumio, and/or VMware NSX) at enterprise scale * Proficiency with network analysis tools (Wireshark, tcpdump, nslookup, traceroute) and traffic flow analysis * Experience with enterprise network infrastructure: firewalls (Palo Alto, Fortinet), load balancers (F5), SD-WAN, and DNS * Understanding of OT/ICS network segmentation requirements for manufacturing environments * Experience with cloud networking (Azure VNets, AWS VPCs, and/or GCP) and hybrid connectivity; familiarity with network automation (Terraform, Ansible, and/or Python) * Degree in Computer Science, Network Engineering, or equivalent experience; strong cross-layer troubleshooting and clear written/verbal communication ## Description As a Zero Trust Network Engineer, you will be responsible for designing, implementing, and managing the network-layer controls that enforce Tesla's Zero Trust Architecture across a global enterprise environment. You will own network segmentation policies, traffic inspection and routing through Zero Trust proxies, microsegmentation enforcement, and network connectivity for Zero Trust platforms. Your work will ensure that Tesla's network infrastructure enforces least-privilege access at every layer, from datacenter east-west traffic to remote user connectivity. What You'll Do * Design and implement network architectures that enforce Zero Trust principles, including microsegmentation, ZTNA, and identity-aware traffic policies * Configure and manage network-layer components of Zero Trust platforms (Zscaler ZIA/ZPA tunnels, Guardicore policies, GRE/IPSec, PAC files) * Develop and maintain microsegmentation policies with Akamai Guardicore across datacenter, manufacturing, and cloud environments * Manage connectivity between Tesla global sites and Zero Trust cloud services, including traffic steering, split tunneling, and bandwidth optimization * Design and enforce network access policies based on identity, device posture, application sensitivity, and location * Troubleshoot complex Zero Trust network issues spanning proxies, SSL/TLS inspection, DNS, certificates, routing, and client-to-app connectivity (including packet-level analysis) * Partner with firewall, load balancer (F5), and DNS teams so Zero Trust policies integrate cleanly with existing network infrastructure * Develop IT/OT segmentation strategies for manufacturing environments and maintain isolation between IT and OT networks * Monitor Zero Trust network performance and inspection latency; optimize traffic paths to protect user experience * Document topologies, segmentation maps, traffic flows, and policy rule sets; participate in 24/7 on-call as required ## Related Videos - [What the Heck is Edge Computing Anyway?](https://www.wearedevelopers.com/videos/593-what-the-heck-is-edge-computing-anyway) - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [Trust Issues: Because Zero-Trust Isn’t Optional Anymore](https://www.wearedevelopers.com/videos/100089-trust-issues-because-zero-trust-isn-t-optional-anymore) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)