Senior Network Security Architect

**Why work at Nebius**Nebius is leading a new era in cloud computing to serve the global AI economy. We create the tools and resources our customers need to solve real-world challenges and transform industries, without massive infrastructure costs or the need to build large in-house AI/ML teams. Our employees work at the cutting edge of AI cloud infrastructure alongside some of the most experienced and innovative leaders and engineers in the field.

**Where we work**Headquartered in Amsterdam and listed on Nasdaq, Nebius has a global footprint with R&D hubs across Europe, North America, and Israel. The team of over 1400 employees includes more than 400 highly skilled engineers with deep expertise across hardware and software engineering, as well as an in-house AI R&D team.

The role

We are seeking a Senior Network Security Architect to join our Network team. This position combines deep expertise in network engineering and cybersecurity, with a focus on designing secure, scalable, and resilient architectures for enterprise and data center environments.

You will be responsible for developing end-to-end network security designs for complex backbone and fabric infrastructures, ensuring alignment with corporate security standards, and driving design reviews in collaboration with the Security and Infrastructure teams.

The role requires hands-on expertise with next-generation firewalls, a deep understanding of routing and switching, and the ability to influence architecture direction across multiple technical domains.

You will also mentor engineers, lead design sessions, and contribute to defining the future of secure network connectivity across on-prem and cloud platforms.  

You’re welcome to work in our office in Amsterdam, The Netherlands or Remote within the EU

Your responsibilities will include: 

• Design secure architectures for enterprise office networks, VPN, and remote access solutions.
• Architect and validate data center fabric/backbone and WAN security designs at scale.
• Lead firewall architecture and policy design across platforms such as Palo Alto and Check Point.
• Define and maintain segmentation models, internet edge, DMZ, and Zero Trust network patterns.
• Perform threat modeling and risk assessments for network and connectivity solutions.
• Ensure network security designs align with industry standards and compliance frameworks (e.g., ISO 27001, SOC 2, NIST).
• Implement automation for configuration, policy deployment, monitoring, and compliance validation using Python, Go, or equivalent tools.
• Collaborate closely with Security, Platform, and Cloud teams to ensure secure integration across environments.
• Lead incident resolution efforts, perform root cause analysis, and guide the team through complex troubleshooting.
• Prepare and present architecture documents for technical and executive review.
• Act as a senior technical mentor and contribute to defining long-term network security strategy.

  

We expect you to have: 

• Proven expertise in networking (TCP/IP, routing protocols, switching) and security architecture.
• Experience designing and securing enterprise, data center, or cloud network infrastructures.
• Hands-on proficiency with next-generation firewalls (Palo Alto, Check Point, or equivalent).
• Practical experience with network automation and scripting in Python, Go, or similar.
• Strong knowledge of Unix/Linux systems and major network vendors (Cisco, Juniper, Aruba, etc.).
• Ability to independently design and document complex architectures with clarity.
• Excellent interpersonal and communication skills, with experience influencing across teams. 
• Excellent written and spoken English communication skills.

It will be an added bonus if you have: 

• Working knowledge of IPv6 and modern routing protocols.
• Experience with automation and infrastructure-as-code tools (Ansible, Terraform, NetBox, SaltStack, etc.).
• Background in large-scale, high-availability distributed systems.
• Familiarity with Zero Trust principles, micro-segmentation, and SASE/SD-WAN architectures.
• Knowledge of identity-based networking and integration with IAM/IdP systems.
• Experience with network visibility and analytics (e.g., Splunk, Zeek, NetFlow).
• Relevant certifications such as CCNP/CCIE, PCNSE, CCSE, or CISSP.

What we offer 

• Competitive salary and comprehensive benefits package.
• Opportunities for professional growth within Nebius.
• Flexible working arrangements.
• A dynamic and collaborative work environment that values initiative and innovation.

We’re growing and expanding our products every day. If you’re up to the challenge and are excited about AI and ML as much as we are, join us!