Cloud Network Security Engineer

Aladdin Platform Engineering powers the technology foundation behind BlackRock’s Aladdin platform - a unified system that connects risk, portfolio management, trading, and operations for investors globally. We build the mission critical hosting platform that enable engineers to develop products and operators to run the platform at scale.

Our teams sit at the center of how Aladdin evolves - partnering across product, data, and engineering to deliver scalable infrastructure that support mission-critical workflows for clients worldwide. We develop AI-first engineering capabilities, using a suite of tools across the development lifecycle to improve developer productivity and reduce friction at scale.

The Cloud Network Security Engineer is responsible for automating, designing, implementing, and maintaining secure networking environments across public, private, and hybrid cloud platforms. This role ensures confidentiality, integrity, and availability of data and services by applying advanced security principles, and compliance standards.

You’ll pair strong engineering fundamentals with an AI-driven approach to solving problems—leveraging automation, intelligent tooling, and emerging AI capabilities to reduce operational toil, accelerate delivery, and enhance the developer experience. As a technical leader, you will help shape platform strategy, influence architectural direction, mentor engineers, and drive the adoption of next-generation engineering practices that define the future of Aladdin.

YOUR RESPONSIBILITIES Architecture & Design Develop secure network architectures for hybrid & multi cloud environments (AWS, Azure, GCP).

• Architect robust security solutions for containerized applications. Implement network segmentation, micro-segmentation, and zero-trust principles. Design end-to-end encrypted connectivity patterns. Design secure network architecture for containerized environments i.e. Open Container Initiative (OCI) container packaging and runtime Design scalable / dynamic security patterns, leveraging tag & identity-based attributes.

• Configure and manage cloud-native firewalls, security groups, network ACLs and network security appliances.

• Deploy intrusion detection/prevention systems and threat monitoring tools.

• Monitor cloud network traffic for anomalies and potential breaches.

• Remediate vulnerability assessments and penetration testing on cloud networks.

• Strong understanding of Infrastructure as Code (IaC) tools and CI/CD pipelines for secure deployments.

• Automate security policy enforcement and configuration management.

• Proficient in scripting with Python to automate network tasks, build integrations, and manage workflows.

• Excellent collaboration skills to work effectively across teams, along with strong verbal and written communication abilities.

• Expertise in network security protocols (IPSec, TLS, MacSec, etc.) and encryption standards.

• Experience with cloud networking services: VPC, VNets, Subnets, Load Balancers.

• Proficiency with IaC Tools and Frameworks: Comfortable working with tools such as Terraform, Ansible to automate infrastructure provisioning and security configuration

• Infrastructure as Code (IaC) tools for provisioning cloud resources., Automation tools for configuration management and deployment, Python scripting.

• Ensure compliance with regulatory frameworks (ISO 27001, SOC2, GDPR).

• Cloud-Native distributed containerized microservice orchestration Network Policies, Istio, Calico.

• Understanding of Open Container Initiative (OCI) container image packaging and runtime/Netconf-yang/Linux/ API programming /JSON /XML /GitHub.

AWS Certified Security Specialty, Azure Security Engineer Associate, Certified Enterprise-grade container orchestration platform supporting declarative infrastructure and horizontal scaling Security Specialist (CKS), CISSP or CCSP.

• Hands-on experience with hybrid cloud connectivity and secure design patterns.

• Work closely with DevOps, Cloud Engineering, and Security Operations teams to deliver key projects.

• Provide technical guidance and documentation for security best practices.

• Excellent collaboration skills to work effectively across teams, along with strong verbal and written communication abilities.

For New York, NY Only the salary range for this position is USD$162,000.00 - USD$200,000.00 . Additionally, employees are eligible for an annual discretionary bonus, and benefits including healthcare, leave benefits, and retirement benefits. BlackRock operates a pay-for-performance compensation philosophy and your total compensation may vary based on role, location, and firm, department and individual performance.

At BlackRock, AI has long been part of how we work – enhancing decision-making, improving operations, and helping us deliver better outcomes for clients. We encourage candidates to use AI thoughtfully to learn, prepare, and work more effectively; but during our interview process, we want to focus on getting to know you through your own experiences, thinking, and judgment.

To support you, we’ve provided guidance on when and how to use AI during our hiring process so you can approach each step with confidence and showcase your best self.

At BlackRock, we are all connected by one mission: to help more and more people experience financial well-being. Our clients, and the people they serve, are saving for retirement, paying for their children’s educations, buying homes and starting businesses. Their investments also help to strengthen the global economy: support businesses small and large; finance infrastructure projects that connect and power cities; and facilitate innovations that drive progress.

BlackRock is proud to be an equal opportunity workplace. We are committed to equal employment opportunity to all applicants and existing employees, and we evaluate qualified applicants without regard to race, creed, color, national origin, sex (including pregnancy and gender identity/expression), sexual orientation, age, ancestry, physical or mental disability, marital status, political affiliation, religion, citizenship status, genetic information, veteran status, or any other basis protected under applicable federal, state, or local law.

View the EEOC’s Know Your Rights poster and its supplement and the pay transparency statement .

BlackRock is committed to full inclusion of all qualified individuals and to providing reasonable accommodations or job modifications for individuals with disabilities. If reasonable accommodation/adjustments are needed throughout the employment process, please email Disability.Assistance@blackrock.com . All requests are treated in line with our privacy policy .