Network Security Engineer

Job description

About Bitdeer: Bitdeer is a world-leading technology company for Bitcoin mining and AI cloud. Bitdeer is committed to providing comprehensive Bitcoin mining solutions for its customers. Apart from designing industry-leading ASIC chips and manufacturing mining rigs, the Group handles complex processes involved in computing across the value chain. This includes equipment procurement, transport logistics, datacenter design and construction, equipment management, and network and facility operations. Bitdeer also offers advanced cloud capabilities to customers with a high demand for artificial intelligence. Headquartered in Singapore, Bitdeer operates globally with a diversified 3 GW energy portfolio, and deploys Bitcoin mining and HPC datacenters in the United States, Bhutan, Norway, Canada, Malaysia, and Ethiopia. About the team As a Network Security Engineer on Bitdeer AI Cloud's Infrastructure Security team, you will design, govern, and continuously validate the network security architecture across multiple AIDCs (AI Data Centers). The core mission is to transform today's manual, ad-hoc network access auditing into an engineered, automated, and measurable continuous-governance system — fundamentally containing the blast radius of any single point of compromise. This role sits within Infrastructure Security and reports to the Head of Security; detections it produces are handed off to SecOps for response. What you will be responsible for: Network security architecture & segmentation — Own the multi-AIDC network trust model and segmentation (north-south perimeter, east-west interconnect, micro-segmentation, Zero Trust), continuously reducing the attack surface from a malicious-tenant / supply-chain-attacker perspective. Access policy lifecycle governance — Govern the design, review, and revocation of firewall rules, security groups, and ZTNA/Zscaler policies; drive Policy-as-Code, least-privilege, and TTL-based policy re-certification. Continuous validation & audit automation — Build network policy drift detection and compliance-validation automation, replacing ad-hoc manual checks with continuous dashboards. Endpoint & remote access security — Design fine-grained employee-endpoint → AIDC access control (identity + device posture); route privileged access through PAM/bastion + MFA. Network monitoring & lateral-movement detection — Establish east-west traffic baselines and lateral-movement detection; hand off anomalies to SecOps for response. AIDC fabric & management-plane security — Partner with Infrastructure/Hardware Security to harden high-speed fabric (InfiniBand/RoCE/UFM), management network (BMC/IPMI), and storage network isolation. Edge & DDoS protection — Own perimeter protection and DDoS mitigation (e.g., Cloudflare-class), making explicit trade-offs between security and latency / performance budgets. Compliance support — Provide network-layer control mapping and audit evidence for SOC2 / ISO 27001 / NIST. How you will stand out: 5+ years in network security engineering, with hands-on cloud / data center network security experience. Strong command of network segmentation, Zero Trust, firewall & security-group policy, ZTNA (e.g., Zscaler), and SASE. Familiar with public / private cloud network security (VPC/NSG, security groups, IaC). Policy-as-Code and automation skills (Terraform / Ansible; Python or Go scripting). Experience with network monitoring / NDR, flow analysis, and lateral-movement detection. Adversarial mindset — able to assess architectural weaknesses from an attacker's view and deliver risk-graded (CRITICAL–LOW) mitigation and detection strategies. AI data center / GPU cluster networking experience; familiarity with InfiniBand/RoCE/UFM. eBPF-based observability (Tetragon / Cilium). Financial-grade / high-compliance industry security background. CISSP / CCNP Security or equivalent certification. Working proficiency in both Chinese and English. What you will experience working with us: A culture that values authenticity and diversity of thoughts and backgrounds; An inclusive and respectable environment with open workspaces and exciting start-up spirit; Fast-growing company with the chance to network with industrial pioneers and enthusiasts; Ability to contribute directly and make an impact on the future of the digital asset industry; Involvement in new projects, developing processes/systems; Personal accountability, autonomy, fast growth, and learning opportunities; Attractive welfare benefits and developmental opportunities such as training and mentoring. -------------------------------------------------------------------- Bitdeer is committed to providing equal employment opportunities in accordance with country, state, and local laws. Bitdeer does not discriminate against employees or applicants based on conditions such as race, colour, gender identity and/or expression, sexual orientation, marital and/or parental status, religion, political opinion, nationality, ethnic background or social origin, social status, disability, age, indigenous status, and union. #LI-ST1