Network Security Engineer

About this role

Etched seeks a Network Security Engineer to design and implement comprehensive network security architecture for a hardware AI infrastructure company. You'll own network hardening, zero-trust implementation, threat detection, and incident response across sensitive on-prem and cloud environments housing proprietary chip design IP.

What you'll do

• Design and deploy zero-trust network architecture across datacenters, offices, and multi-cloud platforms with secure remote access
• Implement network segmentation to isolate ASIC development workflows from general infrastructure and manufacturing systems
• Deploy and operate NDR, IDS/IPS, and firewalls with configuration-as-code automation across physical and virtual networks
• Integrate EDR/XDR, MDM/MAM, SASE, and CASB tools with unified DLP policies to prevent data exfiltration
• Manage vulnerability assessment, prioritization, and remediation for network-layer exposure
• Lead incident response for network security events including detection, containment, and root-cause analysis

What they're looking for

• Network security architecture and zero-trust design
• Firewall and IDS/IPS configuration and operation
• Network flow analysis and packet forensics
• Fortinet ecosystem (firewalls, FortiSASE, FortiAPs)
• Arista switch platforms and EOS automation
• Infrastructure-as-code and security automation
• Multi-cloud networking and CASB/SASE integration
• Incident response and threat hunting

Likely interview questions

• Walk us through how you've designed and implemented a zero-trust network architecture in a previous role. What were the biggest challenges in balancing security with engineer usability?
• Tell us about your hands-on experience with Fortinet and Arista platforms. How have you automated firewall rules, ACLs, or switch configurations rather than managing them manually?