Security Engineer, Network Security

Nscale is the GPU cloud engineered for AI. We provide cost-effective, high-performance infrastructure for AI start-ups and large enterprise customers. Nscale enables AI-focused companies to achieve superior results by reducing the complexity of AI development. Our GPU cloud bolsters technical capabilities and directly supports strategic business outcomes, including cost management, rapid innovation, and environmental responsibility.

We thrive on a culture of relentless innovation, ownership, and accountability, where every team member takes pride in their work and drives it with excellence and urgency. As an Nscaler, you'll build trust through openness and transparency, where everyone is inspired to do their best work. If you join our team, you'll be contributing to building the technology that powers the future.

We're hiring a Staff Security Engineer - Network Security to define and implement the network security patterns that keep Nscale's corporate, OT/BMS, production management, customer management, telemetry, and internet access paths separated, observable, and secure.

This role sits at the intersection of security, infrastructure, facilities, IT, platform engineering, security operations, physical security, and third-party providers
. You'll work across data centers, colocation sites, office environments, and production management networks, reviewing designs before hardware and implementation decisions are locked and creating repeatable baselines that support fast deployment in real-world conditions.

Your work will help Nscale avoid one-off network security decisions at each new site build. By establishing clear trust boundaries, segmentation patterns, and practical standards, you'll enable the business to move quickly while reducing the risk of corporate networks becoming accidental privileged access zones and ensuring operational networks have the controls they need.

• Define data center network security reference architecture across corporate internet access, OT/BMS, production management, customer management, telemetry, and site operations networks.
• Establish trust-boundary decisions that determine which networks are untrusted, which are privileged, and which flows are explicitly required.
• Translate network diagrams into trust boundaries, required flows, security controls, monitoring requirements, and risk decisions.
• Create a clear policy position that corporate site networks provide internet access and do not become privileged access zones by default.

• Design segmentation patterns, firewall policy principles, routing controls, and network access control requirements for high-risk paths.
• Define when network access control is required, optional, or unnecessary based on trust zone, user population, asset class, and operational risk.
• Prevent fragile controls such as IP-based trust from replacing strong identity, device posture, application-layer authentication, and explicit authorization.
• Specify requirements for local safety-critical telemetry paths where latency, availability, or physical operations make remote-only dependencies unacceptable.

• Review new data center, colocation, office, and site network designs before implementation choices are finalized.
• Assess urgent network designs and identify decisions that must be approved, changed, or accepted with compensating controls.
• Set security standards for third-party network providers, installation partners, managed service providers, and data center specialists.
• Build reusable design checklists, diagrams, and decision records for future site builds.