Nebius logo

Senior Network Security Architect

Verified
Nebius
Posted 1 weeks ago
Posted 10 April 2026
full-time

About the Role

<div class="content-intro"><p><strong data-stringify-type="bold">Why work at Nebius<br></strong>Nebius is leading a new era in cloud computing to serve the global AI economy. We create the tools and resources our customers need to solve real-world challenges and transform industries, without massive infrastructure costs or the need to build large in-house AI/ML teams. Our employees work at the cutting edge of AI cloud infrastructure alongside some of the most experienced and innovative leaders and engineers in the field.</p> <p><strong>Where we work<br></strong>Headquartered in Amsterdam and listed on Nasdaq, Nebius has a global footprint with R&amp;D hubs across Europe, North America, and Israel. The team of over 1400 employees includes more than 400 highly skilled engineers with deep expertise across hardware and software engineering, as well as an in-house AI R&amp;D team.</p></div><h3><strong><span data-contrast="auto">The role</span></strong><span data-ccp-props="{}">&nbsp;</span></h3> <p><span data-contrast="none">We are seeking a&nbsp;<strong>Senior Network Security Architect</strong>&nbsp;to join our Network team. This position combines deep expertise in network engineering and cybersecurity, with a focus on designing secure, scalable, and resilient architectures for enterprise and data center environments.<br><br>You will be responsible for developing end-to-end network security designs for complex backbone and fabric infrastructures, ensuring alignment with corporate security standards, and driving design reviews in collaboration with the Security and Infrastructure teams. <br><br>The role requires hands-on expertise with next-generation firewalls, a deep understanding of routing and switching, and the ability to influence architecture direction across multiple technical domains.<br><br>You will also mentor engineers, lead design sessions, and contribute to defining the future of secure network connectivity across on-prem and cloud platforms.</span> <span data-ccp-props="{&quot;335559685&quot;:720,&quot;335559991&quot;:360}">&nbsp;</span></p> <p><span data-ccp-props="{&quot;335559685&quot;:720,&quot;335559991&quot;:360}">You’re welcome to work in our office in <strong>Amsterdam, The Netherlands or Remote within the EU</strong></span></p> <p><strong><span data-ccp-props="{&quot;335559685&quot;:720,&quot;335559991&quot;:360}"><span class="TextRun MacChromeBold SCXW95146830 BCX0" lang="EN-US" data-contrast="auto"><span class="NormalTextRun SCXW95146830 BCX0" data-ccp-charstyle="Strong">Your responsibilities will include:</span></span><span class="EOP SCXW95146830 BCX0" data-ccp-props="{&quot;134233117&quot;:true,&quot;134233118&quot;:true}">&nbsp;</span></span></strong></p> <ul> <li>Design secure architectures for&nbsp;enterprise office networks,&nbsp;VPN, and&nbsp;remote access&nbsp;solutions.</li> <li>Architect and validate&nbsp;data center fabric/backbone&nbsp;and&nbsp;WAN&nbsp;security designs at scale.</li> <li>Lead&nbsp;firewall architecture&nbsp;and&nbsp;policy design&nbsp;across platforms such as&nbsp;Palo Alto&nbsp;and&nbsp;Check Point.</li> <li>Define and maintain&nbsp;segmentation models,&nbsp;internet edge,&nbsp;DMZ, and&nbsp;Zero Trust&nbsp;network patterns.</li> <li>Perform&nbsp;threat modeling&nbsp;and&nbsp;risk assessments&nbsp;for network and connectivity solutions.</li> <li>Ensure network security designs align with&nbsp;industry standards&nbsp;and&nbsp;compliance frameworks&nbsp;(e.g., ISO 27001, SOC 2, NIST).</li> <li>Implement&nbsp;automation&nbsp;for configuration, policy deployment, monitoring, and compliance validation using Python, Go, or equivalent tools.</li> <li>Collaborate closely with&nbsp;Security,&nbsp;Platform, and&nbsp;Cloud&nbsp;teams to ensure secure integration across environments.</li> <li>Lead&nbsp;incident resolution efforts, perform&nbsp;root cause analysis, and guide the team through complex troubleshooting.</li> <li>Prepare and present&nbsp;architecture documents&nbsp;for technical and executive review.</li> <li>Act as a senior technical mentor and contribute to defining long-term network security strategy.<span data-contrast="auto"><span data-ccp-parastyle="Normal (Web)">&nbsp;</span></span><span data-ccp-props="{&quot;134233117&quot;:true,&quot;134233118&quot;:true}">&nbsp;</span></li> </ul> <p><strong><span data-contrast="auto"><span data-ccp-charstyle="Strong">We expect you to have:</span></span><span data-ccp-props="{&quot;134233117&quot;:true,&quot;134233118&quot;:true}">&nbsp;</span></strong></p> <ul> <li>Proven expertise in&nbsp;networking (TCP/IP, routing protocols, switching)&nbsp;and&nbsp;security architecture.</li> <li>Experience designing and securing&nbsp;enterprise,&nbsp;data center, or&nbsp;cloud&nbsp;network infrastructures.</li> <li>Hands-on proficiency with&nbsp;next-generation firewalls&nbsp;(Palo Alto, Check Point, or equivalent).</li> <li>Practical experience with&nbsp;network automation&nbsp;and scripting in Python, Go, or similar.</li> <li>Strong knowledge of&nbsp;Unix/Linux systems&nbsp;and major network vendors (Cisco, Juniper, Aruba, etc.).</li> <li>Ability to independently design and document complex architectures with clarity.</li> <li>Excellent interpersonal and communication skills, with experience influencing across teams.&nbsp;</li> <li>Excellent written and spoken English communication skills.</li> </ul> <p><strong><span data-contrast="auto"><span data-ccp-charstyle="Strong">It will be </span><span data-ccp-charstyle="Strong">an added bonus</span><span data-ccp-charstyle="Strong"> if you have:</span></span><span data-ccp-props="{&quot;134233117&quot;:true,&quot;134233118&quot;:true}">&nbsp;</span></strong></p> <ul> <li>Working knowledge of&nbsp;IPv6&nbsp;and modern routing protocols.</li> <li>Experience with&nbsp;automation and infrastructure-as-code&nbsp;tools (Ansible, Terraform, NetBox, SaltStack, etc.).</li> <li>Background in&nbsp;large-scale, high-availability distributed systems.</li> <li>Familiarity with&nbsp;Zero Trust&nbsp;principles,&nbsp;micro-segmentation, and&nbsp;SASE/SD-WAN&nbsp;architectures.</li> <li>Knowledge of&nbsp;identity-based networking&nbsp;and integration with&nbsp;IAM/IdP&nbsp;systems.</li> <li>Experience with&nbsp;network visibility and analytics&nbsp;(e.g., Splunk, Zeek, NetFlow).</li> <li>Relevant certifications such as&nbsp;CCNP/CCIE,&nbsp;PCNSE,&nbsp;CCSE, or&nbsp;CISSP.</li> </ul><div class="content-conclusion"><p><strong>What we offer</strong>&nbsp;</p> <ul> <li>Competitive salary and comprehensive benefits package.</li> <li>Opportunities for professional growth within Nebius.</li> <li>Flexible working arrangements.</li> <li>A dynamic and collaborative work environment that values initiative and innovation.</li> </ul> <p><span data-contrast="auto">We’re growing and expanding our products every day. If you’re up to the challenge and are excited about AI and ML as much as we are, join us!</span></p></div>

Related Searches

Explore more opportunities matching this role's title, location, and skills.

Job Title PagesLocation PagesCompany PagesSkill Pages

Ready to apply?

Click below to apply directly on Nebius's careers page.

Get the top 10 hyper-growth roles delivered to your inbox every Tuesday.