Calix provides the cloud, software platforms, systems and services required for communications service providers to simplify their businesses, excite their subscribers and grow their value. Calix is seeking a highly skilled and experienced Principal Network Security Engineer to lead the design, implementation, and management of advanced network security solutions within their Cloud environment. The successful candidate will play a leadership role in safeguarding our cloud infrastructure, ensuring robust security posture, and enabling secure operations for customers and internal stakeholders. This role may be based in any major Calix office in the US or remote, with occasional travel for team collaboration and customer engagements. Key Responsibilities Lead the architecture, deployment, and optimization of network security controls and solutions in Google Cloud Platform (GCP) environments. Design and implement security policies, segmentation strategies, firewalls, and access controls to protect cloud-based assets. Collaborate with the Cloud Platform Engineering, SRE, and Application teams to integrate security into cloud-native solutions and workflows. Perform risk assessments, vulnerability analysis, and threat modeling for cloud networks. Monitor, analyze, and respond to security incidents and anomalies within GCP networks, leveraging SIEM/SOAR/XDR/NGFW/DLP and other security tools. Develop and maintain automation scripts and infrastructure-as-code (IaC) for consistent security deployment and compliance. Ensure adherence to regulatory/compliance requirements (e.g., SOC2, ISO27K, GDPR) and internal policies for cloud network security. Mentor and provide technical leadership to junior engineers and cross-functional teams. Stay current with emerging cloud security technologies, trends, and threats. Contribute to the development of security standards, best practices, and documentation for Calix Cloud environments. Required Qualifications Bachelor’s or Master’s degree in Computer Science, Information Security, Engineering, or related field. 10+ years of experience in network security engineering, with at least 3 years focused on cloud environments, preferably Google Cloud Platform. Expert knowledge of cloud networking concepts (VPC, subnets, load balancers, NGFW, VPN, interconnect etc.). Proficiency in cloud security tools and services (Identity-Aware Proxy, Cloud IAM, Security Command Center, SecOps, DLP etc.). Strong understanding of TCP/IP, routing, firewalls, IDS/IPS, zero trust, and segmentation strategies. Experience with automation and scripting (Python, Terraform/OpenTofu, etc.). Solid grasp of security frameworks and compliance standards relevant to cloud environments. Excellent analytical, problem-solving, and communication skills. Relevant certifications (e.g., Google Professional Cloud Security Engineer, CISSP, CCSP) highly desirable. Preferred Skills Experience designing and operating secure cloud environments – preferably Google Cloud. Knowledge of container security (Kubernetes, GKE) and microservices architectures. Strong leadership and project management capabilities. Ability to evangelize security best practices and influence organizational change. The base pay range for this position varies based on the geographic location. More information about the pay range specific to candidate location and other factors will be shared during the recruitment process. Individual pay is determined based on location of residence and multiple factors, including job-related knowledge, skills and experience. San Francisco Bay Area: 182,900 - 310,500 USD Annual All Other US Locations: 159,000 - 270,000 USD Annual As a part of the total compensation package, this role may be eligible for a bonus. For information on our benefits click here. PLEASE NOTE: All emails from Calix will come from a '@calix.com' email address. Please verify and confirm any communication from Calix prior to disclosing any personal or financial information. If you receive a communication that you think may not be from Calix, please report it to us at talentandculture@calix.com. Calix delivers a broadband platform and managed services that enable our customers to improve life one community at a time. We’re at the forefront of a once in a generational change in the broadband industry. Join us as we innovate, help our customers reach their potential, and connect underserved communities with unrivaled digital experiences. This is the Calix mission - to enable BSPs of all sizes to Simplify. Innovate. Grow. To learn more, visit the Calix web site at www.calix.com To learn more about our international job opportunities, please visit our International Careers Page If you are a person with a disability needing assistance with the application process please: Email us at calix.interview@calix.com; or Call us at +1 (408) 514-3000. Calix is a Drug Free Workplace. You may access a copy of Calix Candidate Privacy Policy HERE and other Calix Privacy Policies HERE.
