Sr. Segmentation & Zero Trust Consultant

Sr. Segmentation & Zero Trust Consultant

Remote

Engagement Delivery

• Execute assigned delivery tasks and workstream components within Segmentation and Zero Trust engagements with accountability for quality, accuracy, and on-time completion
• Lead technical components of segmentation assessments: conduct current-state discovery, perform network and application dependency analysis, document findings, and score maturity against defined frameworks with guidance from the engagement lead
• Deliver ’s Segmentation Accelerator and Zero Trust Maturity Evaluation services: protect-surface definitions, zone and trThe Senior Consultant — Segmentation & Zero Trust is a technically strong individual contributor who owns defined delivery tasks and workstream components within network segmentation and Zero Trust practice. Positioned below the Lead Consultant, the Senior Consultant brings hands-on depth across segmentation and Zero Trust domains, executes high-quality client deliverables with growing independence, and begins developing trusted client relationships at the working level.
• The Senior Consultant is the engine of segmentation delivery — leading current-state discovery and dependency mapping, defining protect surfaces, zones, and trust boundaries, authoring segmentation strategy and execution plans, and producing the analytical outputs that underpin client recommendations. They work under the direction of a Lead Consultant, Principal or Senior Manager, and are expected to grow steadily toward owning full workstreams and contributing to pre-sales activities.
• What is Expected
• ust-boundary design, segmentation policy, and rationalization of segmentation- or Zero Trust-enabling technology already owned by the client
• Produce client-ready deliverables — discovery summaries, gap and risk assessments, segmentation strategy, executable segmentation plans, maturity scorecards, architecture diagrams, and executive findings — that meet ’s professional services quality standards
• Facilitate discovery sessions, stakeholder interviews, and working-level workshops; synthesize findings into structured outputs for Lead Consultant review
• Support segmentation strategy and design activities: document current-state architecture, identify gaps and risks, define future-state zones and trust boundaries, and contribute to phased, executable roadmap recommendations under direction of the Lead Consultant or Senior Manager

Client Engagement

• Build working-level relationships with client technical teams and project stakeholders; establish credibility as a reliable, knowledgeable Segmentation and Zero Trust resource throughout the engagement
• Communicate findings clearly and accurately to client counterparts; begin developing the ability to present findings to project sponsors and working-group leadership
• Contribute to client status reporting, meeting facilitation, and action item tracking under the direction of the engagement lead

Pursuit & Practice Support

• Support pre-sales and pursuit activities: contribute to SOW scoping, effort estimation, and proposal content under the direction of the Lead Consultant or Senior Manager
• Contribute to practice development through reusable delivery assets, assessment templates, segmentation patterns, and technical write-ups
• Begin developing commercial awareness: understand engagement economics, utilization expectations, and how delivery quality connects to client satisfaction and account growth

Growth & Development

• Actively build depth across segmentation and Zero Trust domains, platforms, and frameworks through project work, certifications, partner training, and self-directed learning
• Seek and apply feedback from Lead Consultants and Senior Managers; demonstrate consistent growth in delivery independence, communication quality, and technical breadth
• Begin supporting and coaching more junior colleagues on technical tasks and delivery standards

Qualifications

Required

• 4–8 years of experience in cybersecurity or enterprise IT with a clear focus on network segmentation and Zero Trust; must include hands-on experience with at least two segmentation domains (network/fabric segmentation, host-based microsegmentation, identity-based segmentation, or Zero Trust network access)
• Understanding of core segmentation and Zero Trust concepts: protect surfaces, zones and trust boundaries, least privilege, deny-by-default, east-west vs. north-south traffic, lateral-movement containment, blast-radius reduction, application dependency mapping, and visibility-before-enforcement sequencing
• Working knowledge of segmentation and security frameworks: NIST SP 800-207 (Zero Trust), CISA Zero Trust Maturity Model (ZTMM), NIST CSF 2.0, NIST SP 800-53, ISO 27001/27002, PCI-DSS v4 segmentation requirements, HIPAA Security Rule, and ISA/IEC 62443 for OT environments
• Hands-on experience across segmentation domains and platforms, including one or more of:
• Network & Fabric Segmentation — Cisco (ACI, SD-Access/ISE, TrustSec/SGT), Arista (EVPN/VXLAN), Elisity, or equivalent: VRF and VLAN design, fabric-layer enforcement, and macro-segmentation between zones
• Host-Based Microsegmentation — Illumio, Akamai Guardicore, VMware NSX, or Cisco Secure Workload: agent deployment, traffic visibility and dependency mapping, allow-list policy design, and ringfencing of application boundaries
• Firewall & Perimeter Enforcement — Palo Alto, Fortinet, Cisco, or Check Point: security zone and policy design, north-south and inter-VRF enforcement, rule rationalization, and east-west control where applicable
• Identity-Based Segmentation & ZTNA — Zscaler (ZPA), Cisco ISE, or equivalent: identity-driven access control, user-to-application segmentation, NAC integration, and Zero Trust network access design
• Asset Visibility & Discovery — flow collection and dependency mapping, CMDB (e.g., ServiceNow), and OT/IoT/IoMT visibility and risk platforms: building the asset inventory and observed-traffic baseline that segmentation policy depends on

Demonstrated consulting delivery competencies, including:

• Structured discovery: ability to conduct current-state discovery interviews, gather documentation and evidence, manage information collection across workstreams, and synthesize findings into clear, structured outputs
• Gap analysis: experience assessing segmentation program maturity against frameworks, documenting gaps, and prioritizing findings by risk and business impact
• Technical communication: ability to translate segmentation findings and recommendations into clear written deliverables and verbal summaries for technical and working-level client audiences
• Workshop facilitation: participate in and contribute to discovery sessions, technical design sessions, and working-group meetings; begin developing the ability to facilitate independently
• Deliverable quality: consistent track record of producing accurate, well-structured client deliverables — assessment reports, gap and risk registers, segmentation plans, and architecture diagrams — on time and to standard
• Engagement collaboration: work effectively within project teams; communicate status, risks, and issues proactively to the engagement lead; adapt to shifting priorities and client needs

Preferred

• Bachelor’s degree in Computer Science, Information Security, Networking, or a related field
• Industry certifications demonstrating segmentation, network, or security knowledge: CISSP, ISSAP, CISM, CCZT, or equivalent; vendor certifications from Cisco (CCNP Security), Palo Alto (PCNSE), Fortinet (NSE), Illumio, or Zscaler are a strong plus
• Experience in enterprise environments across financial services, healthcare, retail, manufacturing, or public sector — particularly where segmentation intersects with regulatory compliance (HIPAA, PCI-DSS, FedRAMP)
• Prior consulting experience at a professional services firm, systems integrator, or equivalent client-facing advisory role
• Familiarity with pre-sales processes: SOW development, effort estimation, or proposal support

Key Competencies

• Segmentation and Zero Trust technical depth and hands-on delivery execution
• Delivery quality and individual accountability
• Clear technical communication — written and verbal
• Collaborative team contributor with a growth orientation

Success in this role means executing Segmentation and Zero Trust deliverables with high quality and growing independence, building credibility with client teams through consistent technical performance, expanding platform depth and consulting skills, and contributing to a practice that clients trust and return to — while building toward the skills and experience required to step into a Lead Consultant role.