Staff Security Engineer, Network Security

What You’ll Do:

We are seeking a Staff Network Security Engineer to architect the defense of our global backbone, edge, and massive-scale GPU clusters. We are looking for a builder, not an administrator. You will move beyond "configuring firewalls" to engineering security into the network fabric itself—utilizing telemetry, automation, and deep protocol

On this team, you will:

• Unravel and tackle network security challenges at an exhilarating global scale.
• Collaborate with exceptional network architects and engineers building the backbone infrastructure for the AI revolution.
• Enjoy the freedom and support to experiment, innovate, and significantly shape our approach to securing the underlay and overlay of our cloud.

About the role:

In this role, you will:

• Conducting architecture reviews, protocol analysis, and design assessments to proactively identify and fix vulnerabilities in our backbone and data center fabrics.
• Developing robust, repeatable frameworks for network security automation (CoPP, ACL generation, Route Filtering) that make it easy for teams to build securely from day one.
• Collaborating closely with Network Engineering teams to integrate security checks and validation seamlessly into their CI/CD and config-push pipelines.
• Crafting clear, practical security guidance and documentation that empowers engineers to deploy secure routing policies and topologies.
• Actively participating in architectural discussions regarding peering, transit, and traffic engineering, providing insightful security recommendations.
• Occasionally, 'drawing the owl' - figuring out innovative solutions for securing massive throughput environments while navigating ambiguous situations.

Who You Are:

• 7+ years of experience directly focused on Network Engineering, Infrastructure Security, or ISP/Backbone operations.
• Strong skills in core network protocols (BGP, OSPF/IS-IS, TCP/IP) and deep knowledge of how they function at the packet level.
• Solid experience developing network automation or security tooling in Go, Python, or similar modern languages.
• Proven experience collaborating with network architects to implement secure designs in multi-vendor environments (Arista EOS, SONiC, Juniper, etc.).
• Excellent ability to negotiate and reach consensus with engineers and fellow security practitioners, as well as excellent technical documentation skills.
• Familiarity with Linux networking internals, control plane protection, and managing infrastructure as code.

Preferred:

• Hands-on experience with hyperscale network architectures (CLOS fabrics, MPLS/EVPN, VXLAN) and the unique security challenges of high-performance computing.
• Familiarity with hardware-level networking security (SmartNICs/DPUs, connectX) and flow-based telemetry analysis.
• Deep understanding of internet routing security standards (RPKI, MANRS) and advanced DDoS mitigation strategies at the networ