Network Security Architect

Iris Energy; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

IREN’s Network Engineering team is seeking a Network Security Architect to define security across data centre fabrics, WAN, and facilities networks. You will shape policy, enforce segmentation and zero-trust for AI workloads and multi-tenant environments.

You will partner with engineers, security and compliance teams, review designs, mentor staff and drive security automation and policy-as-code within CI/CD pipelines.

Qualifications

• Extensive experience designing security for large data centre, cloud, carrier or hyperscale networks.
• Expert knowledge of firewalls, segmentation, zero-trust access and secure remote access.
• A strong understanding of VXLAN, EVPN and SDN, and how to segment and secure them.
• Broad knowledge of network platforms such as Cisco, Juniper and Arista, and their security capabilities.
• A deep understanding of BGP, OSPF or IS-IS, and MPLS with traffic engineering, and of routing security, including BGP filtering, RPKI and DDoS protection.
• Experience securing multi-tenant HPC and AI environments, including NVIDIA Spectrum networking, DGX clusters and cluster management such as Base Command Manager or Run:ai, and industrial or facilities (OT) networks is highly regarded.
• Working knowledge of frameworks such as NIST, ISO 27001, SOC 2 and IEC 62443.
• Hands-on software engineering in Python or Go, with experience delivering policy-as-code and security automation, and applying AI to security.
• Clear, persuasive communication, explaining risk and trade-offs to engineers and executives alike.

Responsibilities

• Own the network security architecture across data centre fabrics, WAN and backbone, internet and peering edge, and facilities networks.
• Define segmentation and zero-trust patterns, including tenant isolation for AI cloud customers and the boundaries between IT and OT networks.
• Set security standards for firewalls, remote access, device hardening and routing security, and review designs against them.
• Design edge protection, including DDoS mitigation, route filtering and RPKI, with our carriers and peers.
• Define security-as-code: express policy, segmentation and compliance in code that is tested in CI/CD and enforced automatically across the network.
• Build prototypes and reference code for security automation yourself, and set the security architecture for AI workloads and AI tooling.
• Lead security technology selection and vendor evaluation for firewalls, access, monitoring and DDoS services.
• Model threats for new sites and services, and turn the results into practical controls.
• Partner with corporate security, compliance and customer teams on audits and customer security requirements.
• Mentor engineers and act as the final security reviewer for major network changes.
• Define the security architecture of a network built for AI at global scale.
• Influence security strategy, tooling and team structure as IREN grows.
• Competitive salary range finalized based on experience and impact
• Short and long-term incentive programs designed to reward both results and long term company success

Skills

Security architecture

Zero-trust

Firewalls

VXLAN/EVPN/SDN

BGP/OSPF/IS-IS/MPLS

NVIDIA Spectrum networking

Python/Go

Policy-as-code

Communication

Tools

Cisco

Juniper

Arista

NVIDIA Spectrum networking

Job description

Job Type:Full-time |Location:Sydney, NSW |Department:Network |Reporting to:Vice President, Network Engineering |Work Location Type:#onsite

IREN is a vertically integrated AI Cloud provider, delivering large-scale data centers and GPU clusters for AI training and inference. IREN’s platform is underpinned by its expansive portfolio of grid-connected land and power in renewable-rich regions across North America, Europe and APAC.

With 100% renewable energy, we build, own and operate our data centers and take pride in being at the forefront of sustainable solutions for the ever-evolving applications of high-performance compute. We believe that human progress is invaluable, but it should be done in the right way – responsibly, sustainably and having a positive impact on the communities we operate in.

We have grown substantially since 2019, from our inception in Australia to now having several facilities across North America and being listed on NASDAQ… and we are just getting started! By joining us, you will be contributing to the future of sustainable high-performance compute and the local communities we strive to have a positive impact on.

Our Network Engineering team builds the networks that power AI at scale. We design and run the high-performance fabrics that connect tens of thousands of GPUs, the backbone and WAN that link our campuses across continents, and the facilities networks that keep our data centres safe and running. Our work spans all aspects of network engineering for IREN, from the data centre and core to the WAN and peering edge.

As Network Security Architect you will set how IREN's network is secured, from the GPU fabrics inside each data centre to the WAN, peering edge and facilities networks. You will define the security architecture and standards our engineers build to, and make sure security keeps pace as we scale.

Job requirements

• Extensive experience designing security for large data centre, cloud, carrier or hyperscale networks.
• Expert knowledge of firewalls, segmentation, zero-trust access and secure remote access.
• A strong understanding of VXLAN, EVPN and SDN, and how to segment and secure them.
• Broad knowledge of network platforms such as Cisco, Juniper and Arista, and their security capabilities.
• A deep understanding of BGP, OSPF or IS-IS, and MPLS with traffic engineering, and of routing security, including BGP filtering, RPKI and DDoS protection.
• Experience securing multi-tenant HPC and AI environments, including NVIDIA Spectrum networking, DGX clusters and cluster management such as Base Command Manager or Run:ai, and industrial or facilities (OT) networks is highly regarded.
• Working knowledge of frameworks such as NIST, ISO 27001, SOC 2 and IEC 62443.
• Hands-on software engineering in Python or Go, with experience delivering policy-as-code and security automation, and applying AI to security.
• Clear, persuasive communication, explaining risk and trade-offs to engineers and executives alike.

Job responsibilities

• Own the network security architecture across data centre fabrics, WAN and backbone, internet and peering edge, and facilities networks.
• Define segmentation and zero-trust patterns, including tenant isolation for AI cloud customers and the boundaries between IT and OT networks.
• Set security standards for firewalls, remote access, device hardening and routing security, and review designs against them.
• Design edge protection, including DDoS mitigation, route filtering and RPKI, with our carriers and peers.
• Define security-as-code: express policy, segmentation and compliance in code that is tested in CI/CD and enforced automatically across the network.
• Build prototypes and reference code for security automation yourself, and set the security architecture for AI workloads and AI tooling.
• Lead security technology selection and vendor evaluation for firewalls, access, monitoring and DDoS services.
• Model threats for new sites and services, and turn the results into practical controls.
• Partner with corporate security, compliance and customer teams on audits and customer security requirements.
• Mentor engineers and act as the final security reviewer for major network changes.
• Define the security architecture of a network built for AI at global scale.
• Influence security strategy, tooling and team structure as IREN grows.
• Competitive salary range finalized based on experience and impact
• Short and long-term incentive programs designed to reward both results and long term company success

• Competitive salary range finalized based on experience and impact
• Short and long-term incentive programs designed to reward both results and long term company success

We value diverse perspectives and believe that skills can be developed. If you’re passionate about this role, we want to hear from you — whether you meet every criteria or not. Your unique experiences might be exactly what we need!

IREN is an equal opportunity employer that is committed to creating an inclusive workplace. We are committed to evaluating qualified applicants and do not discriminate against protected characteristics under applicable legislation. This job will remain posted until filled. While we appreciate all applications we receive, we are only able to contact candidates under consideration.

By applying for this position and submitting your resume and application materials, you consent to the processing of your personal information in accordance with our Job Applicant Privacy Statement available on our website at www.iren.com.