Network Security Engineer (Micro-Segmentation)

job summary:

We are seeking an experienced Network Security Engineer to join our global infrastructure team. In this role, you will play a pivotal part in designing, deploying, and maintaining advanced micro-segmentation policies and zero-trust security frameworks across our enterprise hybrid cloud environments. You will work closely with cross-functional global teams to protect critical systems and mitigate lateral security risks.

location: Telecommute
job type: Contract
salary: $40 - 50 per hour
work hours: 8am to 5pm
education: Bachelors
responsibilities:

Design, implement, and maintain micro-segmentation policies using Illumio or Guardicore across hybrid workload environments.

Manage, configure, and optimize Palo Alto firewalls and Panorama management systems.

Perform application dependency mapping, policy testing, traffic flow validation, and enforcement across cloud and data center networks.

Utilize automation tools (Python, Terraform, Ansible) to streamline rule pushes and configuration baselines.

Troubleshoot complex network security issues, participate in change management processes, and join a 24x7 on-call rotation.

qualifications:

REQUIRED QUALIFICATIONS

Bachelor's degree in Computer Science, IT, Engineering, or a related field.

8+ years of hands-on experience in networking and network security engineering.

5+ years of experience in network architecture with a focus on enterprise micro-segmentation and zero-trust principles.

Demonstrated hands-on expertise with Palo Alto firewalls and micro-segmentation tools (Illumio Core/Cloud, Guardicore).

Solid experience with cloud networking and security design in AWS and Azure.

PREFERRED QUALIFICATIONS

Proficiency in network automation using Python, Ansible, or Terraform.

Strong understanding of BGP, OSPF, VXLAN, and east-west traffic management.

Experience in ITIL change management processes and global enterprise support.

skills:

Akamai,AWS,Ansible,BGP,Cloud,cloud networking,complex network,Data Center,disaster recovery,DNS,DHCP,Azure,network architecture,network security,Micro-Segmentation,network segmentation,Network automation,OSPF,VXLAN,Python,SD,TCP/IP stack,Terraform,traffic analysis,VPNs,wireless network,zero-trust,zero-trust architecture,exceptional communication skills,self-starting,24x7,change management,ITIL processes,policy creation,policy enforcement,SD-WAN,Security,security updates,traffic flows,workflows

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).
This posting is open for thirty (30) days.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.