Network Security Engineer

Bitdeer Group; Singapore; On-site; SGD 120,000 - 170,000; Full time

Benefits offered by this job

Welfare benefits

Training and mentoring

Job summary

Bitdeer seeks a Network Security Engineer to join Bitdeer AI Cloud’s Infrastructure Security team. You will design and govern the multi‑AIDC network security architecture, implement automated governance, and reduce attack surfaces across data centers and cloud environments.

The role requires 5+ years in network security, expertise in Zero Trust, firewall policy, ZTNA, IaC, and automation with Terraform/Ansible, plus proficiency in English and Chinese.

Qualifications

• 5+ years in network security engineering.
• Strong command of network segmentation, Zero Trust, firewall & security-group policy, ZTNA and SASE.
• Familiar with public/private cloud network security (VPC/NSG, IaC).
• Policy-as-Code and automation skills (Terraform/Ansible; Python or Go).
• Experience with network monitoring/NDR, flow analysis and lateral-movement detection.
• AI data center / GPU cluster networking experience; InfiniBand/RoCE/UFM familiarity.
• eBPF-based observability (Tetragon/Cilium).
• CISSP/CCNP Security or equivalent certification.
• Working proficiency in English and Chinese.

Responsibilities

• Own the multi-AIDC network trust model and segmentation.
• Govern firewall rules, security groups, and ZTNA policies; drive policy-as-code and least-privilege.
• Build network policy drift detection and compliance-automation dashboards.
• Design employee-endpoint to AIDC access control with MFA.
• Establish east-west baselines and lateral-movement detection; escalate to SecOps as needed.
• Hardening of high-speed fabric, management/storage networks; align with hardware security.
• Own perimeter protection and DDoS mitigation with security/support trade-offs.
• Provide network-layer control mapping for SOC2/ISO/NIST audits.

Skills

Network security engineering

Network segmentation

Zero Trust

ZTNA

Firewall policy

SASE

Cloud network security

VPC/NSG

IaC

Policy-as-Code

Terraform

Ansible

Python

Go

NDR

Flow analysis

Lateral movement detection

InfiniBand/RoCE/UFM

eBPF observability

Tetragon

Cilium

CISSP

CCNP Security

Bilingual English/Chinese

Education

CISSP

CCNP Security

Tools

Zscaler

Terraform

Ansible

Tetragon

Cilium

InfiniBand

RoCE

UFM

Job description

About Bitdeer

Bitdeer is a world‑leading technology company for Bitcoin mining and AI cloud.

Bitdeer is committed to providing comprehensive Bitcoin mining solutions for its customers. Apart from designing industry‑leading ASIC chips and manufacturing mining rigs, the Group handles complex processes involved in computing across the value chain. This includes equipment procurement, transport logistics, datacenter design and construction, equipment management, and network and facility operations. Bitdeer also offers advanced cloud capabilities to customers with a high demand for artificial intelligence.

Headquartered in Singapore, Bitdeer operates globally with a diversified 3 GW energy portfolio, and deploys Bitcoin mining and HPC datacenters in the United States, Bhutan, Norway, Canada, Malaysia, and Ethiopia.

About the team

As a Network Security Engineer on Bitdeer AI Cloud's Infrastructure Security team, you will design, govern, and continuously validate the network security architecture across multiple AIDCs (AI Data Centers). The core mission is to transform today's manual, ad‑hoc network access auditing into an engineered, automated, and measurable continuous‑governance system — fundamentally containing the blast radius of any single point of compromise. This role sits within Infrastructure Security and reports to the Head of Security; detections it produces are handed off to SecOps for response.

What you will be responsible for:

• Network security architecture & segmentation — Own the multi‑AIDC network trust model and segmentation (north‑south perimeter, east‑west interconnect, micro‑segmentation, Zero Trust), continuously reducing the attack surface from a malicious‑tenant / supply‑chain‑attacker perspective.
• Access policy lifecycle governance — Govern the design, review, and revocation of firewall rules, security groups, and ZTNA/Zscaler policies; drive Policy‑as‑Code, least‑privilege, and TTL‑based policy re‑certification.
• Continuous validation & audit automation — Build network policy drift detection and compliance‑validation automation, replacing ad‑hoc manual checks with continuous dashboards.
• Endpoint & remote access security — Design fine‑grained employee‑endpoint → AIDC access control (identity + device posture); route privileged access through PAM/bastion + MFA.
• Network monitoring & lateral‑movement detection — Establish east‑west traffic baselines and lateral‑movement detection; hand off anomalies to SecOps for response.
• AIDC fabric & management‑plane security — Partner with Infrastructure/Hardware Security to harden high‑speed fabric (InfiniBand/RoCE/UFM), management network (BMC/IPMI), and storage network isolation.
• Edge & DDoS protection — Own perimeter protection and DDoS mitigation (e.g., Cloudflare‑class), making explicit trade‑offs between security and latency / performance budgets.
• Compliance support — Provide network‑layer control mapping and audit evidence for SOC2 / ISO 27001 / NIST.

How you will stand out:

• 5+ years in network security engineering, with hands‑on cloud / data center network security experience.
• Strong command of network segmentation, Zero Trust, firewall & security‑group policy, ZTNA (e.g., Zscaler), and SASE.
• Familiar with public / private cloud network security (VPC/NSG, security groups, IaC).
• Policy‑as‑Code and automation skills (Terraform / Ansible; Python or Go scripting).
• Experience with network monitoring / NDR, flow analysis, and lateral‑movement detection.
• Adversarial mindset — able to assess architectural weaknesses from an attacker's view and deliver risk‑graded (CRITICAL–LOW) mitigation and detection strategies.
• AI data center / GPU cluster networking experience; familiarity with InfiniBand/RoCE/UFM.
• eBPF‑based observability (Tetragon / Cilium).
• Financial‑grade / high‑compliance industry security background.
• CISSP / CCNP Security or equivalent certification.
• Working proficiency in both Chinese and English.

What you will experience working with us:

• A culture that values authenticity and diversity of thoughts and backgrounds.
• An inclusive and respectful environment with open workspaces and exciting start‑up spirit.
• Fast‑growing company with the chance to network with industrial pioneers and enthusiasts.
• Ability to contribute directly and make an impact on the future of the digital asset industry.
• Involvement in new projects, developing processes/systems.
• Personal accountability, autonomy, fast growth, and learning opportunities.
• Attractive welfare benefits and developmental opportunities such as training and mentoring.

Bitdeer is committed to providing equal employment opportunities in accordance with country, state, and local laws. Bitdeer does not discriminate against employees or applicants based on conditions such as race, colour, gender identity and/or expression, sexual orientation, marital and/or parental status, religion, political opinion, nationality, ethnic background or social origin, social status, disability, age, indigenous status, and union.