Senior Network Security Engineer - DGX Cloud

NVIDIA•Santa Clara, CA

1d•$168,000 - $333,500

About The Position

NVIDIA is seeking a Sr Network Security Engineer to implement and maintain robust security across on-premise and cloud environments - enabling business verticals that span Graphics Drivers to AI and Deep Learning. In this role, you will lead the deployment and management of critical security infrastructure, including next-generation firewalls, load balancers, and advanced threat detection systems, safeguarding our hybrid cloud and on-premise networks while driving compliance across the organization. The ideal candidate brings deep expertise in multi-cloud architectures and cybersecurity, a proven track record of supporting large-scale, high-availability networks, and hands-on experience operating with hyperscaling environments. You’re a decisive problem-solver who thrives in fast-paced settings and moves with urgency to meet the demands of modern infrastructure.

Requirements

Network & Cloud Security Architecture: Proven expertise in secure cloud-native and hybrid network architectures across major CSPs (AWS, GCP, Azure, OCI), ensuring seamless connectivity and stringent security posture.
Secure Network Infrastructure: Proficiency in securely deploying and managing Fortigate (FortiManager), Arista, Cisco, and Cumulus OS devices.
Advanced Threat Protection: Comprehensive operational knowledge of IDS/IPS, SSL inspection, URL filtering, and anti-malware/bot mitigations to maintain high-throughput secured traffic.
Virtualization & Connectivity: Strong understanding of network virtualization (VRFs, VxLAN) and CSP-specific virtualized firewall deployments.
Dynamic Routing Protocols: Proficient in dynamic routing protocols such as BGP, OSPF, IS-IS to ensure resilient and efficient network connectivity.
Monitoring & Observability: Experience managing logging pipelines and telemetry tools such as Splunk and Grafana for proactive security oversight.
8+ years of dedicated network security experience with a Bachelor’s degree or equivalent experience, coupled with the ability to collaborate cross-functionally with global security teams.

Nice To Haves

Multi-Cloud Security Expertise: Deep proficiency in OCI, GCP, AWS, and Azure cybersecurity frameworks.
Infrastructure Proficiency: Working knowledge of Mellanox/Cumulus OS and network routing paradigms.
Automation & AI-Assisted Development: Proven ability to leverage Python, Shell scripting, and AI coding tools (e.g., Cursor, Claude Code) to build efficient automation, frameworks, and operational dashboards.
Large-Scale Experience: Demonstrated success in designing and securing hyper-scale network environments.
Innovation Outlook: Passion for driving progress through the adoption of groundbreaking technologies.

Responsibilities

Design & Integrate: Collaborate with the network architecture team to review and comment on network designs.
Manage & Optimize Infrastructure: Lead the deployment, management, and troubleshooting of firewall, load balancing, and IDS/IPS solutions across both on-premise and cloud environments.
Enhance Visibility & Intelligence: Evolve our security feature set by using telemetry and advanced analytics to improve network observability and proactive threat detection.
Governance & Compliance: Define and maintain comprehensive security guidelines for on-premise and cloud deployments, ensuring consistent alignment with compliance and defense-in-depth standards.
Threat Mitigation: Orchestrate rigorous vulnerability management, including patching and bug scrubs, to proactively eliminate potential threat vectors.
IAM Strategy: Design Identity and Access Management (IAM) policies and controls specifically for services owned and operated by the global networking team.
Operational Excellence: Serve as a key stakeholder in security reviews and ACL approvals, ensuring safe, efficient, and resilient network operations.
Incident Response & Triage: Lead incident response efforts by investigating security alerts, conducting root cause analysis, and executing remediation plans in alignment with security incident handling frameworks.
Operational Enablement: Partner with the global operations team to ensure they have the necessary operational tools, documentation, and actionable information required to provide rapid first-response to network and security incidents.