Network Security Engineer

The role

You will build, operate, and secure network infrastructure for data centers, cloud environments, corporate networks, and AI systems. This is a hands-on individual contributor role working across network security and network operations.

What you will do

• Operate firewalls, ACLs, segmentation, and network security controls across data center, corporate, and AWS environments.
• Support hands-on data center network operations including deployment, configuration, troubleshooting, maintenance, and lifecycle management.
• Implement and maintain segmentation, firewall, and ACL policies across corporate, compute, customer, and infrastructure environments.
• Manage inbound and outbound network controls including public exposure, NAT, load balancers, DNS filtering, proxies, and egress policies.
• Implement and operate VPN, ZTNA, NAC, Wi-Fi, and vendor or partner connectivity.
• Perform recurring firewall rule reviews, segmentation audits, and remediation of unnecessary network exposure.
• Automate network and security workflows using Terraform, Ansible, GitOps, Python, and policy as code.
• Support network telemetry, detection, investigation, and containment in partnership with Security Operations.
• Troubleshoot routing, switching, TCP/IP, DNS, TLS, and cloud networking issues.
• Maintain network architecture documentation, procedures, and runbooks.

Required qualifications

• 7+ years of experience in network security, network engineering, cloud security, or infrastructure security.
• Strong hands-on experience with firewalls, ACLs, segmentation, routing, switching, VPNs, and network troubleshooting.
• Experience operating data center and on-premises network infrastructure.
• Experience with AWS networking, including VPCs, transit gateways, security groups, and load balancers.
• Experience with Palo Alto, Juniper, Cloudflare, or similar platforms.
• Proficiency with Terraform, Ansible, Python, GitOps, or similar automation tools.
• Strong understanding of ZTNA, NAC, egress controls, TCP/IP, DNS, and TLS.
• Strong written communication and documentation skills.
• Ability to work regularly on-site in Sunnyvale, CA and perform hands-on work in data center environments.

Nice to have

• AI, HPC, or large-scale compute environments.
• Data center networking and security.
• AWS network security and segmentation.
• ZTNA and VPN architectures.
• DNS filtering, SWG, proxy, or SASE platforms.
• Vendor and partner connectivity.
• Public exposure and attack surface remediation.
• Network detection and incident response.

About the company

Cerebras Systems builds the world's largest AI chip. The company works with leading model labs, global enterprises, and cutting-edge AI-native startups.