Senior Network Security Engineer | Zero Trust Architecture

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI. What is The Role We're looking for a Senior Network Engineer (VPN/VDI) who will take charge of designing, deploying, and managing our multi-cloud network and VDI infrastructure. In this role, you'll collaborate with engineering, security, and operations teams to drive automation and implement Zero Trust security, ensuring our systems remain reliable and scalable as we grow. If you enjoy building robust networks and making a real impact within an organization, this position offers a chance to do just that. What You Will Be Doing Design a robust multi-cloud network architecture that supports our growing infrastructure needs. Create detailed network diagrams and documentation to guide implementation. Evaluate and select the best networking technologies, while implementing and optimizing routing protocols for efficiency. Develop plans for network scalability and maintain our Meraki networks to ensure reliable performance. Assist in deploying VPN and VDI solutions within our multi-cloud environment. Support integration efforts among network components and facilitate training for junior engineers and support staff. Collaborate with cross-functional teams to ensure smooth implementation of network services and provide on-call support to resolve any issues that arise. Monitor network performance metrics to identify areas for improvement. Analyze traffic patterns to optimize resource allocation and enhance efficiency through performance tuning adjustments. Generate regular reports on performance and collaborate with engineering teams to resolve any performance-related challenges. Implement Zero Trust security principles throughout the network infrastructure to enhance security. Conduct regular security assessments and vulnerability scans to identify weaknesses. Work with security teams to define and implement comprehensive security policies. Deploy and manage effective network security tools and monitor network traffic for any suspicious activity, responding promptly to incidents. Diagnose and address network connectivity issues within the VPN and VDI infrastructure. Utilize network diagnostic tools to identify and address performance bottlenecks effectively. Collaborate with engineering teams to tackle complex technical problems and ensure all issues are logged in a ticketing system for timely resolution. Provide detailed documentation of troubleshooting processes for future reference. Maintain detailed documentation of network configurations and any changes made. Update architectural diagrams to accurately represent the current network topology and VDI setup. Develop standard operating procedures for network maintenance and troubleshooting, while managing a knowledge base with best practices and lessons learned. Oversee the design and deployment of VDI infrastructure tailored to meet organizational needs. Configure and manage VDI solutions to ensure optimal performance and a positive user experience. Integrate VDI systems with the existing network and implement user access controls to create secure environments. Conduct training sessions on VDI best practices and troubleshooting for team members. What You Bring • 5+ years with network engineering in a multi-cloud environment • 3+ years with VPN and VDI technologies Proficiency in designing multi-cloud network architecture Experience with Meraki network management Skilled in conducting security assessments and vulnerability scans Knowledge of network performance monitoring tools Ability to diagnose and address VPN connectivity issues Experience with performance tuning adjustments for networks Proficiency in managing VDI infrastructure and user access controls experience with maintaining Aviatrix Successful implementation of a complex multi-cloud network architecture Track record of optimizing VPN and VDI deployments for performance and reliability Demonstrated improvement in network security posture resulting from Zero Trust implementations Established best practices for network performance monitoring and reporting Compensation for this role is in the form of base salary. This role does not have a variable compensation component. The typical starting salary range for new hires in this role is listed below. In select locations (including Seattle WA, Los Angeles CA, the San Francisco Bay Area CA, and the New York City Metro Area), an alternate range may apply as specified below. These ranges represent the lowest to highest salary we reasonably and in good faith believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the ranges may be modified in the future. An employee's position within the salary range will be based on several factors including, but not limited to, relevant education, qualifications, certifications, experience, skills, geographic location, performance, and business or organizational needs. Elastic believes that employees should have the opportunity to share in the value that we create together for our shareholders. Therefore, in addition to cash compensation, this role is currently eligible to participate in Elastic's stock program. Our total rewards package also includes a company-matched 401k with dollar-for-dollar matching up to 6% of eligible earnings, along with a range of other benefits offered with a holistic emphasis on employee well-being. The typical starting salary range for this role is: $94,300—$149,200 USD The typical starting salary range for this role in the select locations listed above is: $113,300—$179,200 USD Additional Information - We Take Care of Our People As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do. We strive to have parity of benefits across regions and while regulations differ from place to place, we believe taking care of our people is the right thing to do. • Competitive pay based on the work you do here and not your previous salary • Health coverage for you and your family in many locations • Ability to craft your calendar with flexible locations and schedules for many roles • Generous number of vacation days each year • Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service • Up to 40 hours each year to use toward volunteer projects you love • Embracing parenthood with minimum of 16 weeks of parental leave Different people approach problems differently. We need that. Elastic is an equal opportunity employer and is committed to creating an inclusive culture that celebrates different perspectives, experiences, and backgrounds. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation. We welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email candidate_accessibility@elastic.co. We will reply to your request within 24 business hours of submission. Applicants have rights under Federal Employment Laws, view posters linked below: Family and Medical Leave Act (FMLA) Poster; Pay Transparency Nondiscrimination Provision Poster; Employee Polygraph Protection Act (EPPA) Poster and Know Your Rights (Poster) Elasticsearch develops and distributes technology and information that is subject to U.S. and other countries’ export controls and licensing requirements for individuals who are located in or are nationals of the following sanctioned countries and regions: Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the Ukrainian territories annexed by Russia (The Crimea region of Ukraine, The Donetsk People's Republic (DNR), The Luhansk People's Republic (LNR), Kherson or Zaporizhzhia). If you are located in or are a national of one of the listed countries or regions, an export license may be required as a condition of your employment in this role. Please note that national origin and/or nationality do not affect eligibility for employment with Elastic. Please see here for our Privacy Statement.