Network Security Engineer

About the Company

Etched is building hardware for frontier intelligence. We co-design chips, racks, software, and manufacturing to deliver best-in-class throughput and latency across both prefill and decode workloads. We are a fully in-person team in San Jose (Santana Row).

Responsibilities

• Design and implement zero-trust network architecture across on-prem datacenters, office locations, and multi-cloud platforms
• Define and enforce network segmentation policies to isolate sensitive ASIC development workflows
• Deploy, tune, and operate NDR, IDS/IPS, and next-generation firewalls
• Integrate and operate EDR/XDR, MDM/MAM, SASE, and CASB tooling
• Own the vulnerability management process for network-layer exposure
• Lead incident response for network-layer security events
• Architect network segmentation for HPC clusters, isolating EDA tool traffic and ASIC simulation workloads
• Develop automated playbooks for incident scenarios like credential compromise and lateral movement

Requirements

• Deep networking expertise including packet analysis, BGP, and multi-cloud networking
• Hands-on experience with Fortinet ecosystem (firewalls, FortiSASE, FortiAPs) and Arista switch platforms
• Experience treating security as an engineering discipline through code and automation
• Experience securing high-value compute environments like datacenters or HPC clusters
• Proven ability to deploy and integrate EDR/XDR, MDM/MAM, SASE, and CASB
• Experience building or operating ZTNA-based access models
• Strong Linux fundamentals (iptables/nftables, network namespaces, eBPF)
• Ability to build and operate network security monitoring at scale

Preferred Qualifications

• Experience with EDA environments or semiconductor IP security
• Familiarity with cloud-native network security controls on AWS, GCP, or Azure
• Background in NIST, SOC 2, or ISO 27001 frameworks
• Experience with eBPF-based network observability and security tooling