Staff Network Security Engineer

📋 Description

• Lead and secure DigitalOcean's global network infrastructure across edge, backbone, and datacenters.
• Architect secure network architectures and advocate secure practices with engineering teams.
• Build automated security tooling and infrastructure-as-code to validate posture at scale.
• Collaborate with network engineers to embed security controls and telemetry in SDN, BGP/MPLS, and
• Drive security review processes for network infrastructure and product changes before deployment.
• Provide technical leadership and mentorship across security and network teams.

🎯 Requirements

• 8-10 years in network security engineering, security-focused infra, or similar roles.
• Strong communication to explain security concepts to technical and non-technical stakeholders.
• Deep understanding of Layer 2/3/4 protocols (BGP, OSPF, IS-IS, VRRP, LACP) and their security
• Experience with DDoS mitigation, packet filtering, rate limiting, and scrubbing services.
• Proficiency in scripting/programming for automation (Python or Go).
• Hands-on with observability tools (Prometheus, Grafana, ELK) and Git workflows.

🎁 Benefits

• Remote-friendly culture with competitive compensation and equity.
• Career development resources, including conferences and LinkedIn Learning access.
• Comprehensive benefits and a supportive, high-performance environment.