Network Security Engineer

We will conduct an IDV check ; make sure candidates are ready

Business Drivers/Project Goals

Urgent security initiative to refactor enterprise network architecture to a Zero-Trust model, reduce lateral movement risks across hybrid infrastructure, and optimize micro-segmentation policy enforcement.

Scope & Deliverables

Hands-on policy creation, application dependency mapping, firewall policy modifications, agent health monitoring, and defining reusable segmentation patterns for cloud, data center, and branch sites.

Interview Process

Standard multi-stage process involving technical screen and live deep-dive technical discussion on firewall rule-sets, routing, and micro-segmentation design.

Work Setup & Hours

100% Remote; candidates must be open to participating in a 24x7 on-call rotation for high-severity network escalations.

NON-NEGOTIABLES

Education

Bachelor's degree in Computer Science, IT, Engineering, or related field explicitly required by client.

Palo Alto Firewalls (8+ yrs)

Deep hands-on experience configuring, troubleshooting, and engineering Palo Alto firewalls, Panorama, and security profiles.

Micro-Segmentation Platforms (3+ yrs)

Direct operational experience creating policies, mapping application dependencies, and enforcing rules using Illumio Core/Cloud or Guardicore.

Cloud Security Networking (5+ yrs)

Architectural and hands-on experience managing routing, security groups, and firewalls within AWS and Azure.

NICE-TO-HAVES

Network automation fluency using Terraform, Ansible, or Python.

Prior experience implementing ITIL-aligned change management practices in global enterprise environments.

Knowledge of advanced routing protocols (BGP, OSPF, VXLAN) and wireless network infrastructure.

DISQUALIFIERS

Candidate lacks hands-on experience with dedicated micro-segmentation tools (Illumio or Guardicore) or relies solely on traditional edge firewalling.

Candidate is unwilling or unable to participate in a 24x7 on-call rotation.

Absence of cloud networking exposure in either AWS or Azure.

Job Description

Title

Network & Micro-Segmentation Security Engineer

Location

Remote

Start Date / End Date

TBD – TBD (6 Months Duration)

POSITION OVERVIEW The Network & Micro-Segmentation Security Engineer will lead the design, implementation, and optimization of enterprise-wide zero-trust network segmentation architectures across hybrid cloud environments. Working alongside global security, cloud, and infrastructure teams, this role is critical to mitigating lateral movement risks, refactoring security policies, and maintaining Palo Alto firewalls alongside platforms like Illumio Core and Guardicore. The primary goal is to establish standardized, automated, and scalable micro-segmentation frameworks to protect critical data center and cloud workloads.

DAY-TO-DAY RESPONSIBILITIES

• Design, implement, and maintain micro-segmentation policies, including application dependency mapping, rule-set creation, and policy enforcement across hybrid workloads (AWS, Azure, Data Center).
• Configure, modify, and optimize Palo Alto firewalls (via Panorama), site-to-site VPNs, security profiles, whitelisting, and content filtering.
• Monitor agent health, performance, and capacity for segmentation engines (Illumio Core/Cloud or Guardicore/Akamai) across global environments.
• Develop network automation scripts using Python, Ansible, or Terraform to streamline firewall rule pushes, security updates, and segmentation policy changes.
• Execute change management workflows including peer reviews, change requests, impact validation, and post-deployment traffic analysis for east-west and north-south traffic flows.
• Provide escalation support and incident resolution for complex network, routing, and segmentation failures, participating in a 24x7 on-call rotation as needed.

REQUIRED SKILLS

• 8+ years of hands-on networking and network security experience with expertise in Palo Alto firewalls, Panorama, and security profiles.
• 5+ years in global network architecture or design incorporating zero-trust network segmentation principles.
• Proven experience with micro-segmentation platforms such as Illumio Core/Cloud or Guardicore (Akamai Segmentation), including application dependency mapping and policy creation.
• Strong cloud networking foundation in AWS and Azure, including cloud firewalling, hybrid routing, and site-to-site VPNs.

ADDITIONAL DESIRED SKILLS

• Network automation experience using Terraform, Ansible, or Python for policy deployment.
• Working knowledge of core network protocols and technologies: BGP, OSPF, VXLAN, TCP/IP stack, DNS, DHCP, and SD-WAN.
• Understanding of ITIL processes, formal change management, and disaster recovery exercises for segmented application paths.
• Experience with wireless network design and troubleshooting.

CANDIDATE PROFILE

The ideal candidate is a senior-level, self-starting Network Security Engineer with broad enterprise experience in zero-trust architecture and micro-segmentation. They exhibit strong problem-solving skills across complex cloud and data center environments and possess exceptional communication skills to collaborate seamlessly across global teams.

Job Responsibilities

Design, implement, and maintain micro-segmentation policies using Illumio or Guardicore across hybrid workload environments.

Manage, configure, and optimize Palo Alto firewalls and Panorama management systems.

Perform application dependency mapping, policy testing, traffic flow validation, and enforcement across cloud and data center networks.

Utilize automation tools (Python, Terraform, Ansible) to streamline rule pushes and configuration baselines.

Troubleshoot complex network security issues, participate in change management processes, and join a 24x7 on-call rotation.