Job Title: Senior Network Security Engineer (Microsegmentation)Designation: Technical Architect

Location: Bangalore

Job Summary: We are seeking a highly skilled Senior Network Security Engineer with a strong focus on microsegmentation and Zero Trust principles. The ideal candidate will be responsible for translating high-level business objectives into comprehensive network security solutions, ensuring the security and resilience of our global IT infrastructure. This role requires a deep understanding of network security architecture, microsegmentation strategies, and cross-team collaboration to enhance our security posture.

Responsibilities:

Translate high-level business strategic objectives into Enterprise IT requirements and conceptual designs.

Develop and support comprehensive solutions that align with Clients’s global network security and microsegmentation strategy.

Maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models.

Lead end-to-end network and security architecture across global platforms, ensuring secure, high-performing, fault-tolerant, and resilient environments.

Architect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access.

Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement.

Collaborate with application owners to discover, validate, and map application dependencies for policy-driven segmentation.

Define and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments.

Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement.

Lead the adoption of microsegmentation platforms (e.g., Guardicore/Akamai Segmentation).

Develop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks).

Participate in network security design reviews to ensure all implementations meet enterprise security standards.

Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments.

Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting.

Conduct and support internal and external security audits and compliance assessments.

Maintain awareness of emerging threats and update policies accordingly.

Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems.

Manage and optimize Security Information and Event Management (SIEM) systems.

Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence.

Mandatory Skills:

Strong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments.

Proven capability to build application-aware segmentation policies based on traffic flow analysis.

Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms.

Understanding of east-west traffic inspection, workload protection, and software-defined segmentation.

Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models.

Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC.

Expertise in firewall architecture and design with hands-on experience in Fortinet, Palo Alto, and Juniper.

Experience securing public and private cloud environments (AWS, Azure, GCP).

Strong knowledge of routing protocols, network services, and IPv4/IPv6 architecture.

Preferred Skills:

Experience with Web Application and API Protection (WAAP) solutions.

Experience with SDN and SD-WAN architectures, including segmentation use cases.

Experience managing enterprise data center environments with technologies including Aruba, Arista, and Juniper switching.

Qualifications:

Bachelor’s Degree in Computer Science, Network Engineering, or related field (or equivalent experience).

Preferred certifications: CCNP / CCIE, JNCIE Security certifications (CISSP, CISM, or equivalent).