Senior Network Security Engineer (Microsegmentation) # 26-25994

US Tech Solutions•Spring, TX

10d

About The Position

The Senior Network Security Engineer will translate business strategic objectives into enterprise IT requirements and conceptual designs, and develop and support solutions aligned with the client’s global network security and microsegmentation strategy. The role leads network and security architecture across global platforms, maintaining a multi-year roadmap that incorporates Zero Trust and segmentation-driven security models while ensuring environments are secure, high-performing, fault-tolerant, and resilient. The position architects and implements microsegmentation across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access. It operationalizes Zero Trust Architecture by integrating identity-, application-, and network-based policy enforcement; works with application owners to validate and map application dependencies; and defines granular label- or tag-based policies across hybrid environments. The engineer also integrates segmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls, leads adoption of platforms such as Guardicore/Akamai Segmentation, and develops segmentation governance and policy lifecycle practices aligned with compliance frameworks. The role also designs and operates enterprise network security across data centers, campus networks, and hybrid environments. Responsibilities include security design reviews, risk and control-effectiveness reporting, audit and compliance support, threat awareness, policy and procedure development, SIEM optimization, and collaboration with cybersecurity, infrastructure, and application teams. The engineer plans, implements, and documents infrastructure changes and works within ITIL incident, change, and problem management frameworks.

Requirements

10+ years of experience in enterprise network security architecture, engineering, and operations.
10+ years of experience in global network security environments.
Strong hands-on experience designing and implementing microsegmentation solutions in complex enterprise environments.
Proven ability to build application-aware segmentation policies based on traffic flow analysis.
Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms.
Understanding of east-west traffic inspection, workload protection, and software-defined segmentation.
Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models.
Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC.
Expertise in firewall architecture and design, with hands-on experience in Fortinet (FortiGate) and Palo Alto technologies.
Experience with security policy design, NAT, routing, application control, and threat prevention profiles.
Experience securing public and private cloud environments, including AWS, Azure, and GCP.
Experience designing and implementing Web Application and API Protection (WAAP) solutions.
Strong experience with forward and reverse proxies, load balancing, and application security integration.
Experience with SDN and SD-WAN architectures, including segmentation use cases.
Strong knowledge of BGP, OSPF, RIP, and MPLS routing protocols.
Strong knowledge of DNS, DHCP, and NTP network services.
Knowledge of IPv4/IPv6 architecture and traffic management.
Experience with QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants).
Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions.
Experience managing enterprise data center environments and technologies including Aruba and Arista switching, firewalls, WAN optimization, IDS/IPS, and DLP.
Strong understanding of structured cabling and network facilities.
Bachelor’s degree in Computer Science, Network Engineering, or a related field, or equivalent experience.

Nice To Haves

CCNP or CCIE certification.
JNCIE Security certification.
CISSP, CISM, or equivalent certification.

Responsibilities

Translate high-level business strategic objectives and goals into enterprise IT requirements and conceptual designs.
Develop and support solutions aligned with the client’s global network security and microsegmentation strategy.
Develop and maintain a multi-year strategic network and security architecture roadmap incorporating Zero Trust and segmentation-driven security models.
Lead end-to-end network and security architecture across global platforms, ensuring secure, high-performing, fault-tolerant, and resilient environments.
Architect and implement microsegmentation across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access.
Design and operationalize Zero Trust Architecture principles, integrating identity-, application-, and network-based policy enforcement.
Collaborate with application owners to validate and map application dependencies for policy-driven segmentation.
Define and enforce granular security policies using label- or tag-based segmentation across hybrid environments.
Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls.
Lead adoption of microsegmentation platforms such as Guardicore/Akamai Segmentation.
Develop segmentation governance models, policy lifecycle management, and compliance alignment with CIS, NIST, and Zero Trust frameworks.
Participate in network security design reviews and ensure implementations meet enterprise security standards.
Analyze business requirements and design and implement security across data centers, campus networks, and hybrid environments.
Provide risk metrics, control-effectiveness tracking, and security posture reporting.
Conduct and support internal and external security audits and compliance assessments.
Monitor emerging threats and update policies accordingly.
Develop and manage policies, processes, and procedures to support the reliability, availability, and security of network systems.
Manage and optimize SIEM systems.
Collaborate with cybersecurity, infrastructure, and application teams to support compliance and operational excellence.
Plan, implement, and document infrastructure changes, including upgrades and migrations.
Work within ITIL frameworks for incident, change, and problem management.