EI
Network Security Engineer
Expert In Recruitment Solutions
- 🇺🇸 United States
- Remote
- Staff / Principal
- 6 hours ago
- Zero Trust
- AWS
- Azure
- Terraform
- Ansible
- Python
- ITIL
- Change Management
- BGP
- OSPF
- Network Security
- TCP/IP
- DNS
- DHCP
- SD-WAN
- Disaster Recovery
6 hours ago
We will conduct an IDV check ; make sure candidates are ready
Business Drivers/Project Goals: Urgent security initiative to refactor enterprise network architecture to a Zero-Trust model, reduce lateral movement risks across hybrid infrastructure, and optimize micro-segmentation policy enforcement.
Scope & Deliverables: Hands-on policy creation, application dependency mapping, firewall policy modifications, agent health monitoring, and defining reusable segmentation patterns for cloud, data center, and branch sites.
Interview Process: Standard multi-stage process involving technical screen and live deep-dive technical discussion on firewall rule-sets, routing, and micro-segmentation design.
Work Setup & Hours: 100% Remote; candidates must be open to participating in a 24x7 on-call rotation for high-severity network escalations.
NON-NEGOTIABLES
Education: Bachelor's degree in Computer Science, IT, Engineering, or related field explicitly required by client.
Palo Alto Firewalls (8+ yrs): Deep hands-on experience configuring, troubleshooting, and engineering Palo Alto firewalls, Panorama, and security profiles.
Micro-Segmentation Platforms (3+ yrs): Direct operational experience creating policies, mapping application dependencies, and enforcing rules using Illumio Core/Cloud or Guardicore.
Cloud Security Networking (5+ yrs): Architectural and hands-on experience managing routing, security groups, and firewalls within AWS and Azure.
NICE-TO-HAVES
Network automation fluency using Terraform, Ansible, or Python.
Prior experience implementing ITIL-aligned change management practices in global enterprise environments.
Knowledge of advanced routing protocols (BGP, OSPF, VXLAN) and wireless network infrastructure.
DISQUALIFIERS
Candidate lacks hands-on experience with dedicated micro-segmentation tools (Illumio or Guardicore) or relies solely on traditional edge firewalling.
Candidate is unwilling or unable to participate in a 24x7 on-call rotation.
Absence of cloud networking exposure in either AWS or Azure.
Job Description
Title: Network & Micro-Segmentation Security Engineer
Location: Remote
Start Date / End Date: TBD – TBD (6 Months Duration)
POSITION OVERVIEW The Network & Micro-Segmentation Security Engineer will lead the design, implementation, and optimization of enterprise-wide zero-trust network segmentation architectures across hybrid cloud environments. Working alongside global security, cloud, and infrastructure teams, this role is critical to mitigating lateral movement risks, refactoring security policies, and maintaining Palo Alto firewalls alongside platforms like Illumio Core and Guardicore. The primary goal is to establish standardized, automated, and scalable micro-segmentation frameworks to protect critical data center and cloud workloads.
DAY-TO-DAY RESPONSIBILITIES
- Design, implement, and maintain micro-segmentation policies, including application dependency mapping, rule-set creation, and policy enforcement across hybrid workloads (AWS, Azure, Data Center).
- Configure, modify, and optimize Palo Alto firewalls (via Panorama), site-to-site VPNs, security profiles, whitelisting, and content filtering.
- Monitor agent health, performance, and capacity for segmentation engines (Illumio Core/Cloud or Guardicore/Akamai) across global environments.
- Develop network automation scripts using Python, Ansible, or Terraform to streamline firewall rule pushes, security updates, and segmentation policy changes.
- Execute change management workflows including peer reviews, change requests, impact validation, and post-deployment traffic analysis for east-west and north-south traffic flows.
- Provide escalation support and incident resolution for complex network, routing, and segmentation failures, participating in a 24x7 on-call rotation as needed.
- 8+ years of hands-on networking and network security experience with expertise in Palo Alto firewalls, Panorama, and security profiles.
- 5+ years in global network architecture or design incorporating zero-trust network segmentation principles.
- Proven experience with micro-segmentation platforms such as Illumio Core/Cloud or Guardicore (Akamai Segmentation), including application dependency mapping and policy creation.
- Strong cloud networking foundation in AWS and Azure, including cloud firewalling, hybrid routing, and site-to-site VPNs.
- Network automation experience using Terraform, Ansible, or Python for policy deployment.
- Working knowledge of core network protocols and technologies: BGP, OSPF, VXLAN, TCP/IP stack, DNS, DHCP, and SD-WAN.
- Understanding of ITIL processes, formal change management, and disaster recovery exercises for segmented application paths.
- Experience with wireless network design and troubleshooting.
The ideal candidate is a senior-level, self-starting Network Security Engineer with broad enterprise experience in zero-trust architecture and micro-segmentation. They exhibit strong problem-solving skills across complex cloud and data center environments and possess exceptional communication skills to collaborate seamlessly across global teams.
Job Responsibilities
Design, implement, and maintain micro-segmentation policies using Illumio or Guardicore across hybrid workload environments.
Manage, configure, and optimize Palo Alto firewalls and Panorama management systems.
Perform application dependency mapping, policy testing, traffic flow validation, and enforcement across cloud and data center networks.
Utilize automation tools (Python, Terraform, Ansible) to streamline rule pushes and configuration baselines.
Troubleshoot complex network security issues, participate in change management processes, and join a 24x7 on-call rotation.
Network Security Engineer · Expert In Recruitment Solutions