Senior Network Security Engineer - DGX Cloud
Senior network security engineer at NVIDIA securing DGX Cloud: designing and operating firewalls, load balancers, and IDS/IPS across on-prem and multi-cloud (AWS, GCP, Azure, OCI) environments, plus vulnerability management, IAM, compliance, and incident response. Stack includes Fortigate, Arista, Cisco, Cumulus, BGP/OSPF, Splunk, and Python.
- Compensation
- $168K–$333.5K / yr
- Location
- Santa Clara, United States
- Work setup
- Remote
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 8+ years
- Category
- Security
- Posted
Skills
Must have
- Proven expertise in secure cloud-native and hybrid network architectures across major CSPs (AWS, GCP, Azure, OCI)
- Proficiency deploying and managing Fortigate (FortiManager), Arista, Cisco, and Cumulus OS devices
- Operational knowledge of IDS/IPS, SSL inspection, URL filtering, and anti-malware/bot mitigations
- Strong understanding of network virtualization (VRFs, VxLAN) and CSP virtualized firewall deployments
- Proficiency in dynamic routing protocols (BGP, OSPF, IS-IS)
- Experience managing logging pipelines and telemetry tools such as Splunk and Grafana
- 8+ years of dedicated network security experience with a Bachelor's degree or equivalent
Nice to have
- Deep proficiency in OCI, GCP, AWS, and Azure cybersecurity frameworks
- Working knowledge of Mellanox/Cumulus OS and network routing paradigms
- Ability to leverage Python, Shell scripting, and AI coding tools (e.g., Cursor, Claude Code) for automation and dashboards
- Demonstrated success designing and securing hyper-scale network environments
- Passion for driving progress through adoption of groundbreaking technologies
Full description
NVIDIA is seeking a Sr Network Security Engineer to implement and maintain robust security across on-premise and cloud environments - enabling business verticals that span Graphics Drivers to AI and Deep Learning. In this role, you will lead the deployment and management of critical security infrastructure, including next-generation firewalls, load balancers, and advanced threat detection systems, safeguarding our hybrid cloud and on-premise networks while driving compliance across the organization. The ideal candidate brings deep expertise in multi-cloud architectures and cybersecurity, a proven track record of supporting large-scale, high-availability networks, and hands-on experience operating with hyperscaling environments. You’re a decisive problem-solver who thrives in fast-paced settings and moves with urgency to meet the demands of modern infrastructure.
What You Will Be Doing:
- Design & Integrate: Collaborate with the network architecture team to review and comment on network designs.
- Manage & Optimize Infrastructure: Lead the deployment, management, and troubleshooting of firewall, load balancing, and IDS/IPS solutions across both on-premise and cloud environments.
- Enhance Visibility & Intelligence: Evolve our security feature set by using telemetry and advanced analytics to improve network observability and proactive threat detection.
- Governance & Compliance: Define and maintain comprehensive security guidelines for on-premise and cloud deployments, ensuring consistent alignment with compliance and defense-in-depth standards.
- Threat Mitigation: Orchestrate rigorous vulnerability management, including patching and bug scrubs, to proactively eliminate potential threat vectors.
- IAM Strategy: Design Identity and Access Management (IAM) policies and controls specifically for services owned and operated by the global networking team.
- Operational Excellence: Serve as a key stakeholder in security reviews and ACL approvals, ensuring safe, efficient, and resilient network operations.
- Incident Response & Triage: Lead incident response efforts by investigating security alerts, conducting root cause analysis, and executing remediation plans in alignment with security incident handling frameworks.
- Operational Enablement: Partner with the global operations team to ensure they have the necessary operational tools, documentation, and actionable information required to provide rapid first-response to network and security incidents.
What We Need To See:
- Network & Cloud Security Architecture: Proven expertise in secure cloud-native and hybrid network architectures across major CSPs (AWS, GCP, Azure, OCI), ensuring seamless connectivity and stringent security posture.