Senior Information Security Engineer - Firewall Micro-segmentation

About the role

This role is a hybrid position, requiring 3 days a week in the office. No visa sponsorship or visa transfers are available for this position.

Responsibilities

• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to Micro-Segmentation
• Implement requirements and engage teams to create automation / orchestration for the enterprise's Micro-Segmentation solution
• Identify new tools and/or features to strengthen enterprise Micro-Segmentation capabilities
• Serve as a POC for enterprise Micro-Segmentation deployment
• Implement security designs on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
• Utilize subject matter knowledge in industry leading security solutions and best practices to implement components of information security
• Collaborate and provide influence with all members of the microsegmentation team
• Define and coordinate automation strategies to integrate micro-segmentation with CMDB and user-facing portals, translating business and security requirements into actionable deliverables for development teams

Requirements

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications

• Experience with Micro-Segmentation security solutions including policy management
• Experience with scripting
• Strong understanding of APIs and proficiency in working with JSON
• Experience with one or more: Guardicore (Akamai), VMware NSX T, Cisco Secure Workload, Calico/Cilium
• Experience with Hybrid cloud segmentation in Azure/AWS/GCP (NSG/ASG, SG/NACL, tags/labels)
• Experience with Service Mesh (Istio/Envoy), Kubernetes NetworkPolicies, OPA/Gatekeeper
• Scripting skills such as Python/PowerShell, Terraform/Ansible, Git/GitHub, CI/CD; ServiceNow IntegrationHub
• Telemetry (NetFlow/IPFIX/eBPF, VPC Flow Logs) and SIEM analytics (Splunk/Sentinel/Elastic; KQL/SPL)
• Understanding of NIST 800 207 Zero Trust and mapping to NIST/CIS controls
• Experience designing policy simulation/shadow testing and staged rollouts with measurable KPIs
• Excellent technical documentation skills
• Experience with Service Now, Jira or similar systems

Job Expectations

• Willingness and Ability to work off hours and occasional weekends to support change activities
• Participation in on call shift

Pay Range

$100,000.00 - $196,000.00

Benefits

• Health benefits
• 401(k) Plan
• Paid time off
• Disability benefits
• Life insurance, critical illness insurance, and accident insurance
• Parental leave
• Critical caregiving leave
• Discounts and savings
• Commuter benefits
• Tuition reimbursement
• Scholarships for dependent children
• Adoption reimbursement