Network Security Engineer
Job description
A Network Security Engineer role on Nebius's Network team, combining network engineering and cybersecurity to implement and operate end-to-end network security architectures for enterprise and data center backbone/fabric environments.
At a glance
- Work mode
- Remote
- Languages
- English – professional working proficiency
What you'll do
- Implement and maintain Zero Trust-aligned security architectures for both enterprise and data center networks.
- Configure Layer 3/4 & Multi-VRF Segmentation, Security Policies, Secure Remote access.
- Implement and test large hyper scale DC Security solutions: IPS/NDR solutions, AntiDDOS solutions.
- Integrate NGFW platforms with modern identity providers such as Microsoft Entra ID and Okta, maintain NGFW management, automation, and logging capabilities required by the Security team.
- Implement and maintain Security Capabilities, including Layer 7 application inspection, IPS, user identification, ZTNA, and SASE integrations.
- Integrate and operate monitoring tools such as Zabbix, Grafana, and Akvorado.
- Regularly perform security hardening, vulnerability management, and patching and upgrades on network and infrastructure devices, and verify the effectiveness of these procedures.
What we're looking for
- Experience in networking and security protocols (TCP/IP, HTTP(S), DNS, TLS, IPsec, Routing protocols).
- Experience and Knowledge of Backbone & Datacenter technologies (EVPN, L3VPN MPLS, MPBGP, L2VPN).
- Hands-on experience with next-generation firewalls (Palo Alto Networks, Check Point, or similar).
- Experience with automation using Python, Go, or equivalent.
- Proficiency in Unix/Linux and experience with major network vendors (Cisco, Juniper, Aruba, etc.).
- Experience configuring and troubleshooting NGFW capabilities and integrations, including IPS, User-ID, Microsoft Entra ID, and ZTNA.
Nice to have
- Good knowledge of IPv6.
- Experience with automation tools (Ansible, Terraform, NetBox, SaltStack, etc.).
- Experience with large-scale, highly available distributed systems.
- Knowledge of Zero Trust principles and micro-segmentation approaches.
- Relevant certifications (CCNP/CCIE, PCNSE, NSE 4/7) and professional working proficiency in English.
- Familiarity with commercial or open-source monitoring, logging, and security analytics solutions such as Splunk; EDR/XDR platforms such as CrowdStrike; and centralized NGFW management platforms such as Panorama, Strata Cloud Manager, and FortiManager.
- Exposure to DevSecOps practices (SAST/DAST), CSPM/CWPP platforms such as Wiz, EDR, offensive security (OSCP/CPTS, red teaming), or security frameworks, standards, and regulations such as ISO/IEC 27001, NIST CSF, and GDPR.
Your team
Network team
Benefits
- Competitive compensation
- Career growth and learning opportunities
- Flexibility and ownership
- Collaborative and innovative culture
- Opportunity to work on impactful AI projects
- International environment and talented teams
Apply
About Nebius
Leading a new era in cloud infrastructure for the global AI economy
Nebius is building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment. Built by engineers, for engineers, from large-scale GPU orchestration to inference optimization, owning the hard problems across compute, storage, networking and applied AI.
Mission
Building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.
Key facts
- 1,500+
- Amsterdam
- AI cloud infrastructure
- Listed on Nasdaq (NBIS)
- Global footprint with R&D hubs across Europe, the UK, North America and Israel
- Team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D
What they value
- Fast moving
- Bold thinking
- Constant growth
- Meaningful impact
- Trust and real ownership
- Opportunity to shape the future of AI