Network Security Engineer

About the role

Cerebras Systems builds the world's largest AI chip and works with model labs, enterprises and AI-native startups. It is seeking a Network Security Engineer to build, operate and secure the network infrastructure supporting its data centers, cloud environments, corporate network and AI systems. This is a hands-on individual contributor role based in Sunnyvale, CA, with regular on-site work in the data centers.

Key responsibilities

• Operate firewalls, ACLs, segmentation and network security controls across data center, corporate and AWS environments.
• Support hands-on data center network operations, including deployment, configuration, troubleshooting, maintenance and lifecycle management.
• Implement and maintain segmentation, firewall and ACL policies across corporate, compute, customer and infrastructure environments.
• Manage inbound and outbound network controls, including public exposure, NAT, load balancers, DNS filtering, proxies and egress policies.
• Implement and operate VPN, ZTNA, NAC, Wi-Fi and vendor or partner connectivity.
• Perform recurring firewall rule reviews, segmentation audits and remediation of unnecessary network exposure.
• Automate network and security workflows using Terraform, Ansible, GitOps, Python and policy as code.
• Support network telemetry, detection, investigation and containment with Security Operations.
• Troubleshoot routing, switching, TCP/IP, DNS, TLS and cloud networking issues.
• Maintain network architecture documentation, procedures and runbooks.

Required profile

• 7+ years of experience in network security, network engineering, cloud security or infrastructure security.
• Strong hands-on experience with firewalls, ACLs, segmentation, routing, switching, VPNs and network troubleshooting.
• Experience operating data center and on-premises network infrastructure.
• Ability to work regularly on-site in Sunnyvale, CA and perform hands-on work in data center environments.

Required skills

• AWS networking, including VPCs, transit gateways, security groups and load balancers.
• Palo Alto, Juniper, Cloudflare or similar platforms.
• Terraform, Ansible, Python, GitOps or similar automation tools.
• ZTNA, NAC, egress controls, TCP/IP, DNS and TLS.
• Strong written communication and documentation skills.