Staff Security Engineer (Network Security)

TL;DR

Staff Security Engineer (Network Security): Architect and engineer security into the network fabric of a global AI cloud infrastructure with an accent on network protocol analysis, automation, and securing large-scale GPU clusters. Focus on designing secure network architectures, developing automation frameworks, and solving complex security challenges in hyperscale environments.

Location: Hybrid in Livingston, NJ; New York, NY; Sunnyvale, CA; Bellevue, WA

Salary: $188,000–$275,000

Company

hirify.global is a publicly traded AI-focused cloud infrastructure company delivering high-performance platforms for AI labs, startups, and enterprises.

What you will do

• Architect and secure global backbone, edge, and GPU cluster networks beyond firewall configuration.
• Develop automation frameworks for network security including CoPP, ACL generation, and route filtering.
• Collaborate with network engineering teams to integrate security into CI/CD pipelines.
• Conduct architecture reviews and protocol analysis to identify and fix vulnerabilities.
• Provide security guidance and participate in architectural discussions on peering, transit, and traffic engineering.
• Innovate solutions for securing high-throughput environments under ambiguous conditions.

Requirements

• Must have 7+ years of experience in network engineering, infrastructure security, or ISP/backbone operations.
• Strong knowledge of core network protocols (BGP, OSPF/IS-IS, TCP/IP) at the packet level.
• Experience with network automation or security tooling in Go, Python, or similar languages.
• Proven ability to collaborate on secure designs in multi-vendor environments (Arista EOS, SONiC, Juniper).
• Excellent negotiation and technical documentation skills.
• Familiarity with Linux networking internals and infrastructure as code.

Nice to have

• Experience with hyperscale network architectures (CLOS fabrics, MPLS/EVPN, VXLAN).
• Knowledge of hardware-level networking security (SmartNICs/DPUs, connectX) and telemetry analysis.
• Understanding of internet routing security standards (RPKI, MANRS) and advanced DDoS mitigation.
• Hands-on experience with Infiniband and RoCE.

Culture & Benefits

• Comprehensive medical, dental, vision insurance fully paid by employer.
• Company-paid life insurance and disability coverage.
• Flexible spending and health savings accounts, tuition reimbursement.
• Employee stock purchase program and discretionary bonuses.
• 401(k) with employer match and paid parental leave.
• Flexible PTO, mental wellness benefits, family-forming support, and childcare assistance.
• Casual work environment with catered lunches and a culture of innovation.

Hiring process

• Onboarding at one of the company hubs within the first month.
• Quarterly team gatherings to support collaboration.
• Compliance with U.S. export control regulations requiring U.S. person status or eligibility.