AI Cloud & Hyperscale Network Security Architect

Iris Energy; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

IREN’s Network Engineering team is seeking a Network Security Architect to define security across data centre fabrics, WAN, and facilities networks. You will shape policy, enforce segmentation and zero-trust for AI workloads and multi-tenant environments.

You will partner with engineers, security and compliance teams, review designs, mentor staff and drive security automation and policy-as-code within CI/CD pipelines.

Qualifications

• Extensive experience designing security for large data centre, cloud, carrier or hyperscale networks.
• Expert knowledge of firewalls, segmentation, zero-trust access and secure remote access.
• A strong understanding of VXLAN, EVPN and SDN, and how to segment and secure them.
• Broad knowledge of network platforms such as Cisco, Juniper and Arista, and their security capabilities.
• A deep understanding of BGP, OSPF or IS-IS, and MPLS with traffic engineering, and of routing security, including BGP filtering, RPKI and DDoS protection.
• Experience securing multi-tenant HPC and AI environments, including NVIDIA Spectrum networking, DGX clusters and cluster management such as Base Command Manager or Run:ai, and industrial or facilities (OT) networks is highly regarded.
• Working knowledge of frameworks such as NIST, ISO 27001, SOC 2 and IEC 62443.
• Hands-on software engineering in Python or Go, with experience delivering policy-as-code and security automation, and applying AI to security.
• Clear, persuasive communication, explaining risk and trade-offs to engineers and executives alike.

Responsibilities

• Own the network security architecture across data centre fabrics, WAN and backbone, internet and peering edge, and facilities networks.
• Define segmentation and zero-trust patterns, including tenant isolation for AI cloud customers and the boundaries between IT and OT networks.
• Set security standards for firewalls, remote access, device hardening and routing security, and review designs against them.
• Design edge protection, including DDoS mitigation, route filtering and RPKI, with our carriers and peers.
• Define security-as-code: express policy, segmentation and compliance in code that is tested in CI/CD and enforced automatically across the network.
• Build prototypes and reference code for security automation yourself, and set the security architecture for AI workloads and AI tooling.
• Lead security technology selection and vendor evaluation for firewalls, access, monitoring and DDoS services.
• Model threats for new sites and services, and turn the results into practical controls.
• Partner with corporate security, compliance and customer teams on audits and customer security requirements.
• Mentor engineers and act as the final security reviewer for major network changes.
• Define the security architecture of a network built for AI at global scale.
• Influence security strategy, tooling and team structure as IREN grows.
• Competitive salary range finalized based on experience and impact
• Short and long-term incentive programs designed to reward both results and long term company success

Skills

Security architecture

Zero-trust

Firewalls

VXLAN/EVPN/SDN

BGP/OSPF/IS-IS/MPLS

NVIDIA Spectrum networking

Python/Go

Policy-as-code

Communication

Tools

Cisco

Juniper

Arista

NVIDIA Spectrum networking

Job description

IREN’s Network Engineering team is seeking a Network Security Architect to define security across data centre fabrics, WAN, and facilities networks. You will shape policy, enforce segmentation and zero-trust for AI workloads and multi-tenant environments.

You will partner with engineers, security and compliance teams, review designs, mentor staff and drive security automation and policy-as-code within CI/CD pipelines.