Cloud Network Security Engineer (Micro-Segmentation) (26-02122) -

Role

Cloud Network Security Engineer (Micro-Segmentation)

Business Drivers/Project Goals

Urgent security initiative to refactor enterprise network architecture to a Zero-Trust model, reduce lateral movement risks across hybrid infrastructure, and optimize micro-segmentation policy enforcement.

Scope & Deliverables

Hands-on policy creation, application dependency mapping, firewall policy modifications, agent health monitoring, and defining reusable segmentation patterns for cloud, data center, and branch sites.

Interview Process

Standard multi-stage process involving technical screen and live deep-dive technical discussion on firewall rule-sets, routing, and micro-segmentation design.

Work Setup & Hours

100% Remote; candidates must be open to participating in a 24x7 on-call rotation for high-severity network escalations.

NON-NEGOTIABLES

Education

Bachelor's degree in Computer Science, IT, Engineering, or related field explicitly required by client.

Palo Alto Firewalls (8+ yrs)

Deep hands-on experience configuring, troubleshooting, and engineering Palo Alto firewalls, Panorama, and security profiles.

Micro-Segmentation Platforms (3+ yrs)

Direct operational experience creating policies, mapping application dependencies, and enforcing rules using Illumio Core/Cloud or Guardicore.

Cloud Security Networking (5+ yrs)

Architectural and hands-on experience managing routing, security groups, and firewalls within AWS and Azure.

NICE-TO-HAVES

Network automation fluency using Terraform, Ansible, or Python.

Prior experience implementing ITIL-aligned change management practices in global enterprise environments.

Knowledge of advanced routing protocols (BGP, OSPF, VXLAN) and wireless network infrastructure.

DISQUALIFIERS

Candidate lacks hands-on experience with dedicated micro-segmentation tools (Illumio or Guardicore) or relies solely on traditional edge firewalling.

Candidate is unwilling or unable to participate in a 24x7 on-call rotation.

Absence of cloud networking exposure in either AWS or Azure.

Job Description

Title

Network & Micro-Segmentation Security Engineer

Location

Remote

Start Date / End Date

TBD – TBD (6 Months Duration)

POSITION OVERVIEW The Network & Micro-Segmentation Security Engineer will lead the design, implementation, and optimization of enterprise-wide zero-trust network segmentation architectures across hybrid cloud environments. Working alongside global security, cloud, and infrastructure teams, this role is critical to mitigating lateral movement risks, refactoring security policies, and maintaining Palo Alto firewalls alongside platforms like Illumio Core and Guardicore. The primary goal is to establish standardized, automated, and scalable micro-segmentation frameworks to protect critical data center and cloud workloads.

DAY-TO-DAY RESPONSIBILITIES

• Design, implement, and maintain micro-segmentation policies, including application dependency mapping, rule-set creation, and policy enforcement across hybrid workloads (AWS, Azure, Data Center).
• Configure, modify, and optimize Palo Alto firewalls (via Panorama), site-to-site VPNs, security profiles, whitelisting, and content filtering.
• Monitor agent health, performance, and capacity for segmentation engines (Illumio Core/Cloud or Guardicore/Akamai) across global environments.
• Develop network automation scripts using Python, Ansible, or Terraform to streamline firewall rule pushes, security updates, and segmentation policy changes.
• Execute change management workflows including peer reviews, change requests, impact validation, and post-deployment traffic analysis for east-west and north-south traffic flows.
• Provide escalation support and incident resolution for complex network, routing, and segmentation failures, participating in a 24x7 on-call rotation as needed.

REQUIRED SKILLS

• 8+ years of hands-on networking and network security experience with expertise in Palo Alto firewalls, Panorama, and security profiles.
• 5+ years in global network architecture or design incorporating zero-trust network segmentation principles.
• Proven experience with micro-segmentation platforms such as Illumio Core/Cloud or Guardicore (Akamai Segmentation), including application dependency mapping and policy creation.
• Strong cloud networking foundation in AWS and Azure, including cloud firewalling, hybrid routing, and site-to-site VPNs.

About Us

InterSources Inc, a Certified Diverse Supplier, was founded in 2007 and offers innovative solutions to help clients with Digital Transformations across various domains and industries. Our history spans over 19 years and today we are an Award-Winning Global Software Consultancy solving complex problems with technology. We recognize that our employees and our clients are our strengths as the diverse talents and opportunities they bring to the table enable us to grow as a global platform and they are causally linked with our success. We provide strategic and technical advice, and we have expertise in areas covering Artificial Intelligence, Cloud Migration, Custom Software Development, Data Analytics Infrastructure & Cloud Solutions, Cyber Security Services, etc. We make reasonable accommodations for clients and employees and we do not discriminate based on any protected attribute including race, religion, color, national origin, gender sexual orientation, gender identity, age, or marital status. We also are a Google Cloud partner company. We align strategy with execution and provide secure service solutions by developing and using the latest technologies that thrive our resources to deliver industry-leading capabilities to our clients and customers, making it convenient for our clients to do business with InterSources Inc. Our teams also drive growth by refining technology-driven client experiences that put the users first, providing an unparalleled experience. This results in strengthening the core technologies of clients, enabling them to scale with flexibility, create seamless digital experiences and build lifelong relationships.