Security Architect

About Nebius:

Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to production deployment, without the cost and complexity of building large in-house AI/ML infrastructure.

Built by engineers, for engineers. From large-scale GPU orchestration to inference optimization, we own the hard problems across compute, storage, networking and applied AI.

Listed on Nasdaq (NBIS) and headquartered in Amsterdam, we have a global footprint with R&D hubs across Europe, the UK, North America and Israel. Our team of 1,500+ includes hundreds of engineers with deep expertise across hardware, software and AI R&D.

Nebius is looking for an experienced Security Architect to join the Cyber Security organization, reporting to the Security Architect Manager.

• Tel Aviv, Israel
• You’re welcome to work in our offices in Amsterdam.

This role focuses on designing and implementing secure architectures across corporate networks and cloud environments. You will play a key role in defining secure solutions, reviewing system designs, and ensuring security is embedded across enterprise infrastructure.

The ideal candidate brings strong hands-on expertise in network and cloud security, along with the ability to work closely with IT, Infrastructure, DevOps, and Engineering teams to drive secure and scalable implementations.

Your responsibilities will include:

• Design and implement secure architectures across corporate networks, cloud platforms, and hybrid environments.
• Define and maintain security standards, guidelines, and reference architectures aligned with organizational requirements.
• Review and approve architecture and design of new systems, infrastructure, and network changes.
• Design and support secure enterprise network architectures, including segmentation, Zero Trust, and remote access solutions.
• Define and implement controls for firewalls, ZTNA, proxies, and network access control (NAC).
• Design secure cloud architectures including IAM, networking, and workload protection.
• Ensure proper implementation of cloud security controls such as segmentation, encryption, and monitoring.
• Define and support identity and access management controls, including SSO, MFA, and privileged access.
• Contribute to endpoint security architecture, including EDR/XDR and device hardening standards.
• Identify security risks and architectural gaps and recommend mitigation strategies.
• Participate in architecture reviews, risk assessments, and security design discussions.
• Collaborate with SOC, Vulnerability Management, IT, and Engineering teams to improve overall security posture.
• Support implementation of security architecture initiatives and improvements across the organization.

We expect you to have:

• 5+ years of experience in cyber security, with a focus on cloud security, networks, and/or SDLC
• Experience working with cloud platforms (AWS, GCP, Azure) and cloud security best practices.
• Strong hands-on experience in enterprise network security (firewalls, segmentation, VPN, proxies, NAC, etc.).
• Solid understanding of identity and access management (IAM), Active Directory / Entra ID, and access control models.
• Experience working in hybrid environments (on-premise + cloud).
• Strong understanding of security architecture principles and risk-based design.
• Experience working cross-functionally with IT, Infrastructure, DevOps, and Engineering teams.
• Strong analytical and problem-solving skills.

It will be an added bonus if you have:

• Experience with Zero Trust architecture and network segmentation strategies.
• Familiarity with cloud security tools (e.g., Wiz).
• Experience with enterprise identity platforms (Entra ID / Azure AD, Okta, etc.).
• Knowledge of regulatory and compliance frameworks (ISO 27001, SOC 2, NIST, etc.).
• Experience in SaaS, cloud-native, or enterprise-scale environments.
• Relevant certifications such as CISSP, CCSP, or equivalent.
• BSc in Computer Science, Information Security, or a related field.

Benefits & Perks:

• Competitive compensation
• Career growth and learning opportunities
• Flexibility and ownership
• Collaborative and innovative culture
• Opportunity to work on impactful AI projects
• International environment and talented teams

Applicants must be authorized to work in the country in which they apply and will be required to provide proof of employment eligibility as a condition of hire.