Sr. Network Security Engineer (Micro-segmentation)

Sr. Network Security Engineer (Micro-segmentation)

Responsibilities:- Translate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs.- Develop and support comprehensive solutions that meet requirements and align with the client's global network security and microsegmentation strategy.- Develop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models.- Lead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments. Microsegmentation & Zero Trust

Responsibilities:- Architect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access.- Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement.- Collaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation.- Define and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments.- Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement.- Lead adoption of microsegmentation platforms (e.g., Guardicore/Akamai Segmentation).- Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks). Core Network Security

Responsibilities:- Participate in network security design reviews and ensure all implementations meet enterprise security standards.- Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments.- Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting.- Conduct and support internal and external security audits and compliance assessments.- Maintain awareness of emerging threats and update policies accordingly.- Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems.- Manage and optimize Security Information and Event Management (SIEM) systems.- Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence.

Required Skills:- 10+ years of experience in enterprise network security architecture, engineering, and operations.- Strong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments.- Proven capability to build application-aware segmentation policies based on traffic flow analysis.- Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms.- Understanding of east-west traffic inspection, workload protection, and software-defined segmentation.- Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models.- Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC.- Expertise in firewall architecture and design with hands-on experience in Fortinet (Fortigate), Palo Alto, and Juniper.- Experience securing public and private cloud (AWS, Azure, GCP) environments.- Strong knowledge of routing protocols (BGP, OSPF, RIP, MPLS) and network services (DNS, DHCP, NTP).- Experience managing enterprise data center environments with technologies including Aruba, Arista, and Juniper switching.- Bachelor’s Degree in Computer Science, Network Engineering, or related field (or equivalent experience).- Preferred certifications: CCNP / CCIE, JNCIE, Security certifications (CISSP, CISM, or equivalent) are a plus.