Network Security Engineer

Nebius Group; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Nebius is seeking a Network Security Engineer to join our Network team to design and implement end-to-end security architectures for enterprise and data center networks.

You will work with network architects to review and approve designs with Security, and operate day-to-day solutions. Hands-on with firewall platforms, routing, and security policy enforcement are essential to succeed in this role.

Qualifications

• Experience in networking and security protocols (TCP/IP, HTTP(S), DNS, TLS, IPsec, Routing protocols).
• Experience with Backbone Datacenter technologies (EVPN, L3VPN MPLS, MP-BGP, L2VPN).
• Hands-on with next-generation firewalls (Palo Alto Networks, Check Point, or similar).
• Experience with automation using Python, Go, or equivalent.
• Proficiency in Unix/Linux and familiarity with major network vendors (Cisco, Juniper, Aruba).
• Experience configuring and troubleshooting NGFW capabilities and integrations (IPS, User-ID, Microsoft Entra ID, and ZTNA).

Responsibilities

• Implement and maintain Zero Trust-aligned security architectures for both enterprise and data center networks.
• Configure Layer 3/4 Multi-VRF Segmentation and Security Policies.
• Implement and test large hyper scale DC Security solutions: IPS/NDR, Anti-DDOS.
• Integrate NGFW platforms with IdPs (Microsoft Entra ID, Okta) and manage NGFW logging and automation.
• Implement and maintain security capabilities including Layer 7 inspection, IPS, User-ID, ZTNA, and SASE integrations.
• Integrate and operate monitoring tools such as Zabbix, Grafana, and Akvorado.
• Regularly perform security hardening, vulnerability management, patching on network devices.

Skills

Networking

Security protocols

Zero Trust

Python

Go

Unix/Linux

NGFW knowledge

Tools

Palo Alto Networks

Check Point

Zabbix

Grafana

Okta

Microsoft Entra ID

Job description

About Nebius:

Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R D.

Role Summary

We are looking for a Network Security Engineer to join our Network team. This role combines deep expertise in network engineering and cybersecurity. You will help implement end-to-end network security architectures for enterprise and data center backbone/fabric environments, work with network architects and the management team to guide these designs through review and approval with the Security team, and operate and maintain the implemented solutions day-to-day.You are expected to be hands‑on with leading firewall platforms (Palo Alto, Check Point, etc.), understand complex routing and switching designs, and be comfortable implementing and troubleshooting these networks.

Responsibilities

• Implement and maintain Zero Trust-aligned security architectures for both enterprise and data center networks.
• Configure Layer 3/4 Multi-VRF Segmentation, Security Policies, Secure Remote access.
• Implement and test large hyper scale DC Security solutions : IPS/NDR solutions , AntiDDOS solutions.
• Integrate NGFW platforms with modern identity providers such as Microsoft Entra ID and Okta, maintain NGFW management, automation, and logging capabilities required by the Security team.
• Implement and maintain Security Capabilities, including Layer 7 application inspection, IPS, user identification, ZTNA, and SASE integrations.
• Integrate and operate monitoring tools such as Zabbix, Grafana, and Akvorado.
• Regularly perform security hardening, vulnerability management, and patching and upgrades on network and infrastructure devices, and verify the effectiveness of these procedures.

Required Qualifications

• Experience in networking and security protocols (TCP/IP, HTTP(S), DNS, TLS, IPsec, Routing protocols)
• Experience and Knowledge of Backbone Datacenter technologies (EVPN, L3VPN MPLS, MPBGP, L2VPN..)
• Hands‑on experience with next-generation firewalls (Palo Alto Networks, Check Point, or similar).
• Experience with automation using Python, Go, or equivalent.
• Proficiency in Unix/Linux and experience with major network vendors (Cisco, Juniper, Aruba, etc.).
• Experience configuring and troubleshooting NGFW capabilities and integrations, including IPS, User-ID, Microsoft Entra ID, and ZTNA.

Preferred Qualifications

Good kn