Network Security Engineer – AI Cloud Infrastructure

About the role

Bitdeer’s AI Cloud Infrastructure Security team is looking for a Network Security Engineer to design, govern, and continuously validate the network security architecture across multiple AI Data Centers (AIDCs). You will transform manual network access audits into an automated, measurable governance system that limits the blast radius of any compromise.

Key responsibilities

• Own the multi‑AIDC network trust model, including north‑south perimeter, east‑west interconnect, micro‑segmentation and Zero Trust.
• Govern firewall rules, security groups and ZTNA/Zscaler policies, driving Policy‑as‑Code, least‑privilege and TTL‑based re‑certification.
• Build automation for network policy drift detection and compliance validation, replacing ad‑hoc checks with continuous dashboards.
• Design fine‑grained employee‑endpoint to AIDC access controls, routing privileged access through PAM/bastion and MFA.
• Establish east‑west traffic baselines and lateral‑movement detection, handing anomalies to SecOps.
• Partner with infrastructure and hardware security to harden high‑speed fabric (InfiniBand/RoCE/UFM) and management networks (BMC/IPMI).
• Own perimeter protection and DDoS mitigation (e.g., Cloudflare‑class) while balancing security and performance.
• Provide network‑layer control mapping and audit evidence for SOC2 and ISO 27001 compliance.

Required profile

• Proven experience designing and operating network security architectures in large‑scale data‑center environments.
• Strong understanding of Zero Trust principles, policy lifecycle management and automated compliance.
• Ability to work cross‑functionally with infrastructure, hardware and SecOps teams.

Required skills

• Zero Trust Network Access (ZTNA) and Zscaler
• Policy‑as‑Code and TTL‑based policy management
• Network segmentation, firewall rule governance
• InfiniBand, RoCE, UFM
• BMC/IPMI management interfaces
• Cloudflare DDoS mitigation
• SOC2 and ISO 27001 compliance frameworks