Principal Network Security Engineer (Cloud)

Calix provides the cloud, software platforms, systems and services required for communications service providers to simplify their businesses, excite their subscribers and grow their value.

Calix is seeking a highly skilled and experienced Principal Network Security Engineer to lead the design, implementation, and management of advanced network security solutions within their Cloud environment. The successful candidate will play a leadership role in safeguarding our cloud infrastructure, ensuring robust security posture, and enabling secure operations for customers and internal stakeholders.

This role may be based in any major Calix office in the US or remote, with occasional travel for team collaboration and customer engagements.

Key Responsibilities

• Lead the architecture, deployment, and optimization of network security controls and solutions in Google Cloud Platform (GCP) environments.
• Design and implement security policies, segmentation strategies, firewalls, and access controls to protect cloud-based assets.
• Collaborate with the Cloud Platform Engineering, SRE, and Application teams to integrate security into cloud-native solutions and workflows.
• Perform risk assessments, vulnerability analysis, and threat modeling for cloud networks.
• Monitor, analyze, and respond to security incidents and anomalies within GCP networks, leveraging SIEM/SOAR/XDR/NGFW/DLP and other security tools.
• Develop and maintain automation scripts and infrastructure-as-code (IaC) for consistent security deployment and compliance.
• Ensure adherence to regulatory/compliance requirements (e.g., SOC2, ISO27K, GDPR) and internal policies for cloud network security.
• Mentor and provide technical leadership to junior engineers and cross-functional teams.
• Stay current with emerging cloud security technologies, trends, and threats.
• Contribute to the development of security standards, best practices, and documentation for Calix Cloud environments.
  
  
  

Required Qualifications

• Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or related field.
• 10 years of experience in network security engineering, with at least 3 years focused on cloud environments, preferably Google Cloud Platform.
• Expert knowledge of cloud networking concepts (VPC, subnets, load balancers, NGFW, VPN, interconnect etc.).
• Proficiency in cloud security tools and services (Identity-Aware Proxy, Cloud IAM, Security Command Center, SecOps, DLP etc.).
• Strong understanding of TCP/IP, routing, firewalls, IDS/IPS, zero trust, and segmentation strategies.
• Experience with automation and scripting (Python, Terraform/OpenTofu, etc.).
• Solid grasp of security frameworks and compliance standards relevant to cloud environments.
• Excellent analytical, problem-solving, and communication skills.
• Relevant certifications (e.g., Google Professional Cloud Security Engineer, CISSP, CCSP) highly desirable.
  
  
  

Preferred Skills

• Experience designing and operating secure cloud environments – preferably Google Cloud.
• Knowledge of container security (Kubernetes, GKE) and microservices architectures.
• Strong leadership and project management capabilities.
• Ability to evangelize security best practices and influence organizational change.
  
  
  

The base pay range for this position varies based on the geographic location. More information about the pay range specific to candidate location and other factors will be shared during the recruitment process. Individual pay is determined based on location of residence and multiple factors, including job-related knowledge, skills and experience.

San Francisco Bay Area

182,900 - 310,500 USD Annual

All Other US Locations:

159,000 - 270,000 USD Annual

As a part of the total compensation package, this role may be eligible for a bonus. For information on our benefits click here.