Network Security Microsegmentation Engineer
Summary
Design and enforce microsegmentation policies using Illumio to secure hybrid networks under Zero Trust principles, troubleshooting traffic and collaborating with infrastructure teams.
Key Responsibilities:
- Design, implement, and maintain microsegmentation policies using Illumio.
- Analyze application communication flows and define dependencies.
- Enforce least-privilege access aligned to Zero Trust principles.
- Deploy segmentation policies across hybrid and on-prem environments.
- Collaborate with application and infrastructure teams.
- Troubleshoot blocked or unexpected traffic.
- Support change management and policy lifecycle operations.
- Document segmentation design and procedures.
Qualifications:
- 5+ years' experience in network security or cybersecurity engineering.
- Hands-on experience with Illumio.
- Strong understanding of Zero Trust principles.
- Solid networking fundamentals (TCP/IP, DNS, routing, firewalls).
- Experience with firewall policy design and traffic analysis.
- Strong understanding of network security technologies including firewalls, routing, ACLs, traffic analysis, and policy enforcement across on-premises and cloud environments.
- Experience analyzing network traffic and security logs to troubleshoot application connectivity and segmentation-related issues.
- Strong troubleshooting skills.
- Experience with Windows and Linux.
Preferred Qualifications:
- Experience implementing microsegmentation policies at enterprise scale.
- Cloud security experience in Azure, AWS, and/or GCP environments.
- Hands-on experience with Palo Alto Networks and/or Check Point firewall administration, policy management, and traffic analysis.
- Experience using Splunk or similar SIEM and log analytics platforms (e.g., Microsoft Sentinel, QRadar, Elastic, LogRhythm) for security monitoring, troubleshooting, and traffic investigation.
- Familiarity with security tools including SIEM, EDR, vulnerability management, and network visibility platforms.
- Scripting or automation experience using PowerShell, Python, or similar languages.
- Relevant security certifications such as CISSP, CCNP Security, PCNSE, CCSM, Security+, or equivalent.