Staff Network Security Engineer

Responsibilities

• Define and enforce network security architecture standards and principles
• Provide technical leadership and mentorship to security and network engineering teams
• Lead network security assessments including threat modeling and intrusion detection
• Develop and deploy advanced security automation and infrastructure-as-code
• Collaborate with network engineers to integrate security controls within SDN and BGP/MPLS
• Participate in incident response efforts related to network security
• Drive the security review process for all network infrastructure and product changes
• Promote security best practices through documentation and cross-team collaboration

Requirements

• 8-10 years of experience in network security engineering or security-focused infrastructure
• Deep understanding of Layer 2/3/4 networking protocols (BGP, OSPF, IS-IS, VRRP, LACP)
• Deep understanding of DDoS attack vectors and mitigation strategies
• Extensive experience designing and building secure networks
• Proficiency in Python or Go for automation and tooling
• Familiarity with Corero, Cloudflare, Juniper, Arista, or Ciena platforms
• Strong Linux experience and familiarity with firewall, routing, and DNS security
• Experience with Network Intrusion Detection principles and tooling
• Knowledge of MPLS, BGP-LU, and SDN architectures
• Hands-on experience with Prometheus, Grafana, or ELK stack
• Comfortable with Git-based workflows

Preferred Qualifications

• Open-source contributions related to network security
• Background in security incident response or red/blue team operations

About the Company

DigitalOcean is a cloud provider dedicated to simplifying cloud and AI for builders, offering scalable infrastructure to help developers create software that changes the world.