Join our team as a Sr. Network Security Engineer with a focus on Microsegmentation. This role is pivotal in translating business strategies into robust enterprise IT requirements and conceptual designs.

You will be responsible for developing and supporting comprehensive solutions that align with our global network security and microsegmentation strategy. A key aspect of this position involves creating and maintaining a multi-year strategic roadmap for network and security architecture, integrating cutting-edge Zero Trust and segmentation-driven security models.

Architect and implement advanced microsegmentation strategies across data center, campus, and cloud environments to effectively limit lateral movement and enforce least-privilege access. Design and operationalize Zero Trust Architecture (ZTA) principles, seamlessly integrating identity, application, and network-based policy enforcement.

You will also integrate microsegmentation capabilities with essential security tools like firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement. Developing comprehensive segmentation governance models, managing the policy lifecycle, and ensuring compliance with frameworks such as CIS, NIST, and Zero Trust are critical functions of this role.

We are seeking a candidate with strong, hands-on experience in designing and implementing microsegmentation solutions within complex enterprise environments. Proven ability to construct application-aware segmentation policies based on thorough traffic flow analysis is essential.

Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms is expected. A solid understanding of east-west traffic inspection, workload protection, and software-defined segmentation is required. Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models will be advantageous.

Proficiency in managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC, is necessary. Expertise in firewall architecture and design, particularly with Fortinet, Palo Alto, or Juniper, is highly valued. Experience securing public and private cloud environments (AWS, Azure, GCP) and designing Web Application and API Protection (WAAP) solutions is also important.

A strong grasp of routing protocols such as BGP, OSPF, and MPLS, along with network services like DNS and DHCP, is crucial. Knowledge of IPv4/IPv6 architecture, traffic management, QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies is required. Experience with F5 GTM/LTM, VPN technologies, and internet proxy solutions will be beneficial.