Network Security Engineer

Stack

Responsibilities

• ▹Implement and maintain Zero Trust-aligned security architectures for enterprise and data center networks
• ▹Configure Layer 3/4 & Multi-VRF Segmentation, Security Policies, Secure Remote access
• ▹Implement and test large hyper-scale DC security solutions: IPS/NDR, Anti-DDoS solutions
• ▹Integrate NGFW platforms with modern identity providers such as Microsoft Entra ID and Okta, maintain NGFW management, automation and logging
• ▹Implement and maintain security capabilities including Layer 7 application inspection, IPS, user identification, ZTNA and SASE integrations
• ▹Integrate and operate monitoring tools such as Zabbix, Grafana and Akvorado
• ▹Regularly perform security hardening, vulnerability management, patching and upgrades on network and infrastructure devices

Requirements

• ▹Experience in networking and security protocols (TCP/IP, HTTP(S), DNS, TLS, IPsec, routing protocols)
• ▹Knowledge of backbone and data center technologies (EVPN, L3VPN MPLS, MPBGP, L2VPN)
• ▹Hands-on experience with next-generation firewalls (Palo Alto Networks, Check Point or similar)
• ▹Experience with automation using Python, Go or equivalent
• ▹Proficiency in Unix/Linux and experience with major network vendors (Cisco, Juniper, Aruba etc.)
• ▹Experience configuring and troubleshooting NGFW capabilities and integrations, including IPS, User-ID, Microsoft Entra ID and ZTNA

Nice to have

• ▹Good knowledge of IPv6
• ▹Experience with automation tools (Ansible, Terraform, NetBox, SaltStack etc.)
• ▹Experience with large-scale, highly available distributed systems
• ▹Knowledge of Zero Trust principles and micro-segmentation approaches
• ▹Relevant certifications (CCNP/CCIE, PCNSE, NSE 4/7)
• ▹Familiarity with commercial or open-source monitoring, logging and security analytics solutions such as Splunk, and EDR/XDR platforms such as CrowdStrike

About the company

Nebius is building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure. Listed on Nasdaq (NBIS) and headquartered in Amsterdam, it has R&D hubs across Europe, the UK, North America and Israel, with a team of 1,500+ including hundreds of engineers across hardware, software and applied AI R&D.