Network Security - Micro Segmentation

Role Title:

Location:

Experience:

Role Overview

Key Responsibilities

• Analyze L2–L7 traffic flows; perform packet capture/analysis (Wireshark, tcpdump).
• Manage ports, protocols, and service communications for secure segmentation.
• Conduct application dependency mapping and align with Zero Trust principles.
• Deploy and manage Illumio PCE for workload visibility, policy creation, and enforcement.
• Utilize Octoflow for investigation and policy automation.
• Integrate secrets and certificate management (CyberArk, Vault, HSM-CipherTrust, PKI/Forgerock).
• Troubleshoot complex segmentation/security issues; support design & architecture discussions.
• Document network architectures, segmentation policies, and troubleshooting procedures.

Must-Have Skills

• Strong understanding of L2–L7 network traffic flows, ports, and protocols.
• Proficiency in packet analysis (Wireshark, tcpdump).
• Expertise in Zero Trust Architecture & application dependency mapping.
• Hands-on with Illumio PCE and Octoflow.
• Experience with DevSecOps integration (CyberArk, Vault, CipherTrust).
• Solid knowledge of PKI & related tools.

Desired Skills

• Security automation & orchestration experience.
• Cloud/hybrid network segmentation.
• Container security (Kubernetes, Docker).
• Scripting (Python, Bash).
• Threat modeling & risk-based segmentation.

Preferred Certifications

• Illumio Certified Engineer
• GIAC GSEC / GCSA
• Zero Trust Certified Architect (ZTCA)
• CyberArk, HashiCorp Vault, PKI certifications
• Network+ / CCNA / CCNP