Network Security Engineer — Zero Trust & Data Center Defender

Nebius Group; United States; A distancia; USD 120.000 - 160.000; Jornada completa

Descripción de la vacante

Nebius is seeking a Network Security Engineer to join our Network team to design and implement end-to-end security architectures for enterprise and data center networks.

You will work with network architects to review and approve designs with Security, and operate day-to-day solutions. Hands-on with firewall platforms, routing, and security policy enforcement are essential to succeed in this role.

Formación

• Experience in networking and security protocols (TCP/IP, HTTP(S), DNS, TLS, IPsec, Routing protocols).
• Experience with Backbone Datacenter technologies (EVPN, L3VPN MPLS, MP-BGP, L2VPN).
• Hands-on with next-generation firewalls (Palo Alto Networks, Check Point, or similar).
• Experience with automation using Python, Go, or equivalent.
• Proficiency in Unix/Linux and familiarity with major network vendors (Cisco, Juniper, Aruba).
• Experience configuring and troubleshooting NGFW capabilities and integrations (IPS, User-ID, Microsoft Entra ID, and ZTNA).

Responsabilidades

• Implement and maintain Zero Trust-aligned security architectures for both enterprise and data center networks.
• Configure Layer 3/4 Multi-VRF Segmentation and Security Policies.
• Implement and test large hyper scale DC Security solutions: IPS/NDR, Anti-DDOS.
• Integrate NGFW platforms with IdPs (Microsoft Entra ID, Okta) and manage NGFW logging and automation.
• Implement and maintain security capabilities including Layer 7 inspection, IPS, User-ID, ZTNA, and SASE integrations.
• Integrate and operate monitoring tools such as Zabbix, Grafana, and Akvorado.
• Regularly perform security hardening, vulnerability management, patching on network devices.

Conocimientos

Networking

Security protocols

Zero Trust

Python

Go

Unix/Linux

NGFW knowledge

Herramientas

Palo Alto Networks

Check Point

Zabbix

Grafana

Okta

Microsoft Entra ID

Descripción del empleo

Nebius is seeking a Network Security Engineer to join our Network team to design and implement end-to-end security architectures for enterprise and data center networks.

You will work with network architects to review and approve designs with Security, and operate day-to-day solutions. Hands-on with firewall platforms, routing, and security policy enforcement are essential to succeed in this role.