Senior Network Security Engineer

• Build, configure, and maintain GlobalProtect VPN for secure remote access
• Create and manage site-to-site VPN tunnels between on-premises infrastructure and Azure and AWS environments
• Troubleshoot VPN connectivity, tunnel stability, and routing issues across hybrid cloud environments

• Integrate and manage EZPKI and EZRadius (Azure-based SaaS RADIUS and SaaS TLS/PKI services) for certificate-based network authentication
• Deploy and support TLS-based 802.1X authentication for IP cameras and other IoT devices
• Configure 802.1X network access control policies across wired and wireless infrastructure

• Configure and maintain routing on Ruckus switches
• Support VLAN segmentation, inter-VLAN routing, and network access policies for IoT and camera device segments

• Support Prisma (Prisma Access / Prisma Cloud) initiatives as needed
• Support Palo Alto CASB deployment and policy configuration as needed

• Proven hands-on experience with Palo Alto Networks firewalls (policy creation, NAT, routing, troubleshooting)
• Experience configuring and supporting GlobalProtect VPN
• Experience building site-to-site VPN tunnels with Azure and AWS
• Working knowledge of 802.1X authentication (wired/wireless) and certificate-based network access
• Experience with Ruckus switch configuration and routing
• Strong understanding of enterprise routing concepts (static routing, VLANs, inter-VLAN routing)
• Solid troubleshooting skills across firewall, VPN, and switching layers
• Performed root-cause analysis on wireless access point failures, adjusted AP placement and power/range settings to optimize coverage, and resolved intermittent Wi-Fi connectivity issues.
• Skilled in wireless access point diagnostics, RF coverage tuning, and troubleshooting client connectivity and signal degradation issues.

• Experience with Prisma Access and/or Prisma Cloud
• Experience with Palo Alto CASB
• Experience with EZPKI / EZRadius or similar Azure-based SaaS RADIUS/PKI/TLS certificate services
• Experience deploying TLS/802.1X authentication for IoT devices and IP cameras
• Relevant certifications such as PCNSE (Palo Alto Certified Network Security Engineer), CCNP\CCNP Security, or similar
• Light automation such ansible, Terraform, Saltstack
• Prior military service, particularly in communications, networking, cybersecurity, IT, or other technical fields, is highly valued. Relevant military training and operational experience will be considered alongside civilian industry experience.

• Firewall policies and routing are well-organized, documented, and optimized for security and performance
• GlobalProtect VPN provides reliable, secure remote access for all authorized users
• Site-to-site tunnels to Azure and AWS are stable and properly monitored
• Certificate-based authentication (EZPKI/EZRadius) is integrated smoothly with minimal access disruptions
• IoT devices and cameras are securely onboarded via 802.1X/TLS with minimal friction
• Ruckus switch routing is stable and correctly segmented across the network

• Competitive base salary
• Equity ownership in a rapidly growing advanced energy company
• Comprehensive medical benefits
• Unlimited PTO
• Free daily lunch provided onsite
• Generous PPE stipend
• High-impact startup environment with significant ownership and autonomy
• Opportunities for rapid career growth and internal advancement
• Direct collaboration with experienced operators, engineers, and industry leaders
• The opportunity to help build and scale transformative energy technology from the ground up

Valar Atomics is an equal opportunity employer.

We consider all qualified applicants without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, age, disability, veteran status, or any other protected status under applicable law.

We are committed to providing a workplace free of discrimination and harassment and will provide reasonable accommodation as required by law.

Applicants must be legally authorized to work in the United States as a U.S. citizen or lawful permanent resident (green card holder).