Senior Network Security Engineer

Iris Energy; Sydney; On-site; AUD 180,000 - 240,000; Full time

Benefits offered by this job

Competitive salary range

Incentive programs

Job summary

Iris Energy in Sydney, NSW, is seeking a Senior Network Security Engineer to protect our AI cloud networks. You'll design and operate security controls across data centres, WANs and edge deployments, maintaining firewall policies and secure access paths.

The role requires hands-on firewall/NAC, experience with Fortinet or Palo Alto, routing protocols, scripting in Python or Go, and familiarity with ISO 27001/SOC 2. We offer competitive salary and long-term incentive programs.

Qualifications

• Solid experience in network security engineering in data centre, cloud or service provider environments.
• Deep hands-on knowledge of next-generation firewalls (Fortinet or Palo Alto Networks), VPNs and segmentation.
• A strong grounding in routing and switching, including BGP, OSPF or IS-IS, VXLAN and EVPN, and MPLS with traffic engineering, and how to secure them.
• Hands-on experience with network platforms such as Cisco, Juniper and Arista, and how to harden them.
• Experience with SIEM, IDS/IPS and network monitoring tools, and with handling security incidents.
• Strong coding skills in Python or Go, with hands-on experience automating firewall policy, compliance checks or incident response.
• Experience securing HPC and GPU environments, such as NVIDIA Spectrum networking and DGX clusters, is highly regarded.
• Familiarity with security frameworks and standards such as ISO 27001, SOC 2 and NIST.
• Clear writing and the judgement to balance security with the needs of a fast-moving business.

Responsibilities

• Build, operate and harden firewalls, VPNs and segmentation across data centres, network locations and cloud connections.
• Own firewall and access policy: rule reviews, clean-up, change control and enforcement of least privilege.
• Secure remote and administrative access to network infrastructure, including multi-factor authentication and privileged access paths.
• Protect the network edge, including BGP security, route filtering and DDoS readiness with our carriers.
• Monitor and investigate network security events using SIEM, IDS/IPS and flow data, and lead network incident response.
• Run vulnerability management for network devices, from firmware advisories through patching and verification.
• Automate security operations, including firewall policy deployment, configuration compliance checks and alert enrichment, so that controls are enforced by code.
• Develop and maintain security tooling with Git, code review and CI/CD, and use AI to speed up investigation and triage.
• Support audits and customer security requirements, such as ISO 27001 and SOC 2, with clear evidence and documentation.
• Shape network security for one of the fastest-growing AI cloud platforms.
• Grow towards security architecture or lead roles as the team expands.
• Competitive salary range finalized based on experience and impact
• Short and long-term incentive programs designed to reward both results and long term company success

Skills

Network security engineering

Fortinet

Palo Alto Networks

BGP/OSPF/IS-IS

Cisco/Juniper/Arista

SIEM/IDS/IPS

Python/Go scripting

NVIDIA Spectrum

Compliance standards

Job description

Job Type:Full-time |Location:Sydney, NSW |Department:Network |Reporting to:Vice President, Network Engineering |Work Location Type:#onsite

IREN is a vertically integrated AI Cloud provider, delivering large-scale data centers and GPU clusters for AI training and inference. IREN’s platform is underpinned by its expansive portfolio of grid-connected land and power in renewable-rich regions across North America, Europe and APAC.

With 100% renewable energy, we build, own and operate our data centers and take pride in being at the forefront of sustainable solutions for the ever-evolving applications of high-performance compute. We believe that human progress is invaluable, but it should be done in the right way – responsibly, sustainably and having a positive impact on the communities we operate in.

We have grown substantially since 2019, from our inception in Australia to now having several facilities across North America and being listed on NASDAQ… and we are just getting started! By joining us, you will be contributing to the future of sustainable high-performance compute and the local communities we strive to have a positive impact on.

Our Network Engineering team builds the networks that power AI at scale. We design and run the high-performance fabrics that connect tens of thousands of GPUs, the backbone and WAN that link our campuses across continents, and the facilities networks that keep our data centres safe and running. Our work spans all aspects of network engineering for IREN, from the data centre and core to the WAN and peering edge.

As a Senior Network Security Engineer you will protect the networks behind IREN's AI cloud. You will build and run the security controls across our data centres, WAN and edge, keep our firewalls and access paths tight, and lead the response when something looks wrong.

Job requirements

• Solid experience in network security engineering in data centre, cloud or service provider environments.
• Deep hands-on knowledge of next-generation firewalls (such as Fortinet or Palo Alto Networks), VPNs and segmentation.
• A strong grounding in routing and switching, including BGP, OSPF or IS-IS, VXLAN and EVPN, and MPLS with traffic engineering, and how to secure them.
• Hands-on experience with network platforms such as Cisco, Juniper and Arista, and how to harden them.
• Experience with SIEM, IDS/IPS and network monitoring tools, and with handling security incidents.
• Strong coding skills in Python or Go, with hands-on experience automating firewall policy, compliance checks or incident response.
• Experience securing HPC and GPU environments, such as NVIDIA Spectrum networking and DGX clusters, is highly regarded.
• Familiarity with security frameworks and standards such as ISO 27001, SOC 2 and NIST.
• Clear writing and the judgement to balance security with the needs of a fast-moving business.

Job responsibilities

• Build, operate and harden firewalls, VPNs and segmentation across data centres, network locations and cloud connections.
• Own firewall and access policy: rule reviews, clean-up, change control and enforcement of least privilege.
• Secure remote and administrative access to network infrastructure, including multi-factor authentication and privileged access paths.
• Protect the network edge, including BGP security, route filtering and DDoS readiness with our carriers.
• Monitor and investigate network security events using SIEM, IDS/IPS and flow data, and lead network incident response.
• Run vulnerability management for network devices, from firmware advisories through patching and verification.
• Automate security operations, including firewall policy deployment, configuration compliance checks and alert enrichment, so that controls are enforced by code.
• Develop and maintain security tooling with Git, code review and CI/CD, and use AI to speed up investigation and triage.
• Support audits and customer security requirements, such as ISO 27001 and SOC 2, with clear evidence and documentation.
• Shape network security for one of the fastest-growing AI cloud platforms.
• Grow towards security architecture or lead roles as the team expands.
• Competitive salary range finalized based on experience and impact
• Short and long-term incentive programs designed to reward both results and long term company success

We value diverse perspectives and believe that skills can be developed. If you’re passionate about this role, we want to hear from you — whether you meet every criteria or not. Your unique experiences might be exactly what we need!

IREN is an equal opportunity employer that is committed to creating an inclusive workplace. We are committed to evaluating qualified applicants and do not discriminate against protected characteristics under applicable legislation.

This job will remain posted until filled. While we appreciate all applications we receive, we are only able to contact candidates under consideration.