Senior Information Security Engineer - Firewall Micro-segmentation

About the role

This role is a hybrid position, requiring 3 days in the office. No visa sponsorship or transfers are available for this position.

Responsibilities

• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to Micro-Segmentation
• Implement requirements and engage teams to create automation / orchestration for the enterprise's Micro-Segmentation solution
• Identify new tools and/or features to strengthen enterprise Micro-Segmentation capabilities
• Serve as a POC for enterprise Micro-Segmentation deployment
• Implement security designs on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
• Utilize subject matter knowledge in industry leading security solutions and best practices to implement components of information security
• Collaborate and provide influence with all members of the microsegmentation team
• Define and coordinate automation strategies to integrate micro-segmentation with CMDB and user-facing portals, translating business and security requirements into actionable deliverables for development teams

Requirements

• 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education

Desired Qualifications

• Experience with Micro-Segmentation security solutions including policy management
• Experience with scripting
• Strong understanding of APIs and proficiency in working with JSON
• Experience with one or more: Guardicore (Akamai), VMware NSX T, Cisco Secure Workload, Calico/Cilium
• Experience with Hybrid cloud segmentation in Azure/AWS/GCP (NSG/ASG, SG/NACL, tags/labels)
• Experience with Service Mesh (Istio/Envoy), Kubernetes NetworkPolicies, OPA/Gatekeeper
• Scripting skills such as Python/PowerShell, Terraform/Ansible, Git/GitHub, CI/CD; ServiceNow IntegrationHub
• Telemetry (NetFlow/IPFIX/eBPF, VPC Flow Logs) and SIEM analytics (Splunk/Sentinel/Elastic; KQL/SPL)
• Understanding of NIST 800 207 Zero Trust and mapping to NIST/CIS controls
• Experience designing policy simulation/shadow testing and staged rollouts with measurable KPIs
• Excellent technical documentation skills
• Experience with Service Now, Jira or similar systems

Job Expectations

• Willingness and Ability to work off hours and occasional weekends to support change activities
• Participation in on call shift

Pay Range

$100,000.00 - $196,000.00

Benefits

Health benefits
401(k) Plan
Paid time off
Disability benefits
Life insurance, critical illness insurance, and accident insurance
Parental leave
Critical caregiving leave
Discounts and savings
Commuter benefits
Tuition reimbursement
Scholarships for dependent children
Adoption reimbursement

Posting End Date

16 Jul 2026

Reference Number

R-554011-4