Sr. Network Security Engineer (Micro-segmentation)

We are seeking a Senior Network Security Engineer with strong hands-on experience in enterprise network security architecture, microsegmentation, and Zero Trust security models. The ideal candidate will design and implement secure, scalable network solutions across data center, campus, and hybrid cloud environments, with a focus on application-aware segmentation and reducing lateral movement risks.

Key Responsibilities

• Design and implement enterprise network security architecture aligned with Zero Trust and microsegmentation strategies.

• Develop multi-year network security roadmaps for global enterprise environments.

• Lead microsegmentation initiatives using platforms such as Guardicore/Akamai Segmentation.

• Analyze application dependencies and traffic flows to develop granular, application-aware segmentation policies.

• Integrate segmentation solutions with firewalls, SIEM, IAM, EDR/XDR, and cloud security controls.

• Design, configure, and optimize firewalls, IDS/IPS, VPN, NAC, proxy, and other network security technologies.

• Secure data center, campus, and hybrid cloud environments across AWS, Azure, and Google Cloud Platform.

• Support security audits, compliance assessments, risk reporting, and security policy governance.

• Lead network upgrades, migrations, incident management, and change management in accordance with ITIL processes.

• Collaborate with cybersecurity, infrastructure, and application teams to ensure secure and reliable network operations.

Required Skills and Qualifications

• 10+ years of experience in enterprise network security engineering, architecture, and operations.

• Strong hands-on experience implementing microsegmentation in complex enterprise environments.

• Expertise in application dependency mapping, traffic flow analysis, policy simulation, enforcement, and optimization.

• Strong understanding of Zero Trust Architecture, ZTNA, least-privilege access, and east-west traffic security.

• Hands-on experience with Fortinet FortiGate, Palo Alto, and Juniper firewalls.

• Strong knowledge of firewall policies, NAT, routing, application control, and threat prevention.

• Experience with SIEM, IDS/IPS, VPN, NAC, WAAP, forward/reverse proxies, and load balancing.

• Knowledge of AWS, Azure, Google Cloud Platform, SDN, and SD-WAN security.

• Strong networking fundamentals: BGP, OSPF, MPLS, DNS, DHCP, IPv4/IPv6, ACLs, QoS, and NetFlow.

• Experience with F5 GTM/LTM and enterprise data center networking technologies, including Aruba and Arista.

• Familiarity with security governance frameworks such as NIST and CIS.

Education and Certifications

• Bachelor’s degree in Computer Science, Network Engineering, or a related field, or equivalent experience.

• Preferred certifications: CCNP, CCIE, JNCIE, CISSP, or CISM.

Preferred Qualifications

• Experience managing segmentation policy lifecycle and governance across hybrid environments.

• Experience aligning microsegmentation controls with enterprise compliance requirements.

• Strong stakeholder management, technical documentation, troubleshooting, and communication skills.