{"id":866000,"url":"https://alion.io/job/solidigm-network-security-engineer","title":"Network Security Engineer","company":{"id":690993,"name":"Solidigm","domain":"solidigm.com","url":"https://alion.io/company/solidigm","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":38,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Shanghai, China"],"countries":["CN"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":320400,"max":452300,"currency":"CNY","period":"year","gross":null,"usd_annual":68204},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-02T04:56:29Z","employer_posted_date":"2026-09-02","last_verified_at":"2026-11-04T14:36:29Z","board_verified":true,"closed_at":null,"days_open":63,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":63},"description":"Join a multibillion-dollar global company that brings together amazing technology, people, and operational scale to become a powerhouse in the memory industry. Headquartered in Rancho Cordova, California, Solidigm combines elements of an established, successful technology company with the spirit, agility, and entrepreneurial mindset of a start-up. In addition to the U.S. headquarters and other facilities in the U.S., the company has international presence in Asia, Europe, and the Americas. Solidigm will continue to lead the world in innovating new Memory technologies with aspirations to be the #1 NAND memory company in the world. At Solidigm, we view problems as opportunities to define innovative solutions that hold the power to change the world and unleash the potential technological needs that the future holds. At Solidigm, we are One Team that fosters a diverse, equitable, and inclusive culture that embraces individual uniqueness and empowers us to bring our best selves to deliver excellence in support of Solidigm's vision and mission to be the go-to partner for optimized data storage solutions. You can be part of the takeoff of an innovative business that develops cutting-edge products, delivers strong business value for customers, provides an engaging workplace for its employees, and serves a greater impact on the world. This is a golden opportunity for the right applicant to join us and help design, build, and lead Solidigm. We want a diverse team of dedicated professionals who will not just be Solidigm team members but contribute to how we shape the future of the organization. We are seeking applicants who will grow and thrive in our culture; be customer inspired, trusting, innovative, team-oriented, inclusive, results driven, collaborative, passionate, and flexible.\n The Network Security Engineer is responsible for designing, implementing, securing, and automating the enterprise network security infrastructure supporting global manufacturing, engineering, office, cloud, and data center environments. This role combines hands-on engineering of Palo Alto firewalls, network segmentation, secure remote access, proxy services, and Zero Trust architectures with the development of automation frameworks, AI-driven operational workflows, and Model Context Protocol (MCP) integrations that improve efficiency and reduce operational risk. The engineer partners with global infrastructure, cloud, and security teams to deliver resilient, scalable, and secure network solutions while driving continuous innovation through automation, Infrastructure as Code, API integrations, and AI-powered network security operations.\nEssential Duties & Responsibilities\nAI & Intelligent Automation\nDesign, develop, and maintain AI-powered automation solutions that improve the efficiency, accuracy, and scalability of network security operations.\nBuild AI agents capable of performing network security analysis, policy validation, troubleshooting, incident triage, and operational workflows.\nDevelop and maintain Model Context Protocol (MCP) tools and integrations that enable Large Language Models (LLMs) to securely interact with Palo Alto Networks, Panorama, SCM, network infrastructure, CMDBs, monitoring platforms, and security systems.\nLeverage AI to automate firewall policy analysis, change validation, risk assessment, rule optimization, and compliance reporting.\nEvaluate emerging AI technologies and recommend opportunities to improve network security engineering, operational efficiency, and user experience.\nNetwork Security Automation & Platform Engineering\nDesign and develop automation using Python, Ansible, Terraform, REST APIs, and Infrastructure-as-Code methodologies.\nDevelop reusable automation frameworks for firewall deployments, policy management, VPN provisioning, certificate lifecycle management, and network segmentation.\nBuild API integrations between Palo Alto Networks, Panorama, Cisco infrastructure, ServiceNow, SIEM platforms, identity providers, and cloud services.\nCreate self-service automation capabilities that reduce manual engineering effort while maintaining enterprise security standards.\nDevelop automated configuration validation, compliance auditing, and policy drift detection.\nNetwork Security Architecture & Engineering\nDesign, implement, and optimize secure network architectures for engineering, office, and cloud environments.\nDevelop security designs for new sites, applications, and infrastructure projects while aligning with Zero Trust principles.\nCreate and maintain network security standards, reference architectures, and design documentation.\nEvaluate new network security technologies and recommend improvements to the enterprise security architecture.\nSupport SAML, RADIUS, TACACS+, LDAP, and certificate-based authentication.\nZero Trust & Segmentation\nDesign and implement micro-segmentation strategies across campus, data center, manufacturing, and cloud environments.\nDevelop segmentation policies based on business risk, application dependency mapping, and least-privilege access.\nPartner with application owners to reduce unnecessary network trust relationships\nCloud Network Security\nEngineer secure connectivity between on-premises data centers and cloud environments (Azure, AWS, GCP).\nDesign cloud firewall policies, VPN connectivity, and cloud-native security controls.\nSupport hybrid network security architecture for multi-cloud deployments.\nSecurity Platform Integration\nIntegrate network security infrastructure with:Cisco ISE\nActive Directory\nPKI\nSIEM platforms\nSOAR solutions\nIdentity Providers\nEndpoint security platforms\n\nSecurity Governance\nPerform firewall rule reviews and recertification.\nIdentify overly permissive policies and recommend remediation.\nSupport compliance initiatives including ISO 27001, NIST, and customer security requirements.\nParticipate in security audits and remediation activities.\nGlobal Protect & Remote Access Operations\nSupport secure remote access for APAC employees and contractors.\nTroubleshoot authentication, access, and routing issues across hybrid AD environments.\n 5-7 years Strong experience with Palo Alto firewalls, Panorama, and SCM.\nFamiliarity with manufacturing or lab network environments preferred.\nAbility to troubleshoot complex routing, segmentation, and PAN Global Protect issus.\nExperience with authentication (RADIUS, AD, SAML) and VPN platforms.\nEnglish proficiency for global collaboration is strongly preferred.\n Powered by SmartRecruiters - Candidate Privacy Policy","description_format":"text","description_chars":6524,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Advanced (C1)","optional":true}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Enterprise Storage Systems","Memory & Storage Chips"],"lifecycle":[{"event":"open","at":"2026-09-13T13:26:33Z"}],"visa":[],"liveness":{"score":28,"band":"fade","label":"Fading","p_open":1,"p_active":0.783,"p_room":0.36,"age_days":63,"expected_fill_days":38,"reasons":["conf:1","velocity","win:tail","crowd:"],"computed_at":"2026-11-04T06:34:25Z"},"pay":{"stated_usd_annual":68204,"is_top_pay":false},"html_url":"https://alion.io/job/solidigm-network-security-engineer","json_url":"https://alion.io/job/solidigm-network-security-engineer.json","meta":{"generated_at":"2026-11-04T15:46:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24120,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":690993},"rest":"https://alion.io/mcp/rest/get_company?id=690993"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsolidigm-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsolidigm-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsolidigm-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/solidigm-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsolidigm-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":866000}},{"tool":"search_jobs","arguments":{"company":"solidigm.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":866000},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}