Job description

Duration: 6+ Months Contract Key Responsibilities: • Translate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs. • Develop and support comprehensive solutions that meet requirements and align with client’s global network security and microsegmentation strategy . • Develop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models . • Lead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments. Microsegmentation & Zero Trust Responsibilities: • Architect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access . • Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement. • Collaborate with application owners to Client, validate, and map application dependencies to enable policy-driven segmentation. • Define and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments. • Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement. • Lead adoption of microsegmentation platforms (e.g , Guardicore/Akamai Segmentation ). • Develop segmentation governance models , policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks). Core Network Security Responsibilities: • Participate in network security design reviews and ensure all implementations meet enterprise security standards. • Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments . • Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting . • Conduct and support internal and external security audits and compliance assessments . • Maintain awareness of emerging threats and update policies accordingly. • Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems. • Manage and optimize Security Information and Event Management (SIEM) systems. • Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence. Microsegmentation & Advanced Security: • Strong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments. • Proven capability to build application-aware segmentation policies based on traffic flow analysis. • Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms. • Understanding of east-west traffic inspection, workload protection, and software-defined segmentation . • Familiarity with Zero Trust Network Access (ZTNA) and identity-driven access models. Network Security & Infrastructure: • Strong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC . • Expertise in firewall architecture and design with hands-on experience in: • Fortinet (Fortigate), Palo Alto, Client • Policy design, NAT, routing, application control, and threat prevention profiles • Experience securing public and private cloud (AWS, Clienture, GCP) environments. • Design and implementation of Web Application and API Protection (WAAP) solutions. • Strong experience in proxy (forward/reverse), load balancing, and application security integration . • Experience with SDN and SD-WAN architectures , including segmentation use cases. Qualifications: • 10+ years of experience in enterprise network security architecture, engineering, and operations. Networking & Protocol Expertise: • Strong knowledge of: • Routing protocols: BGP, OSPF, RIP, MPLS • Network services: DNS, DHCP, NTP • IPv4/IPv6 architecture and traffic management • Experience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants) . • Experience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions . Data Center & Infrastructure: • Experience managing enterprise data center environments with technologies including: • Aruba, Arista, Client switching • Firewalls, WAN optimization, IDS/IPS, DLP • Strong understanding of structured cabling and network facilities . Operations & Lifecycle Management: • Plan, implement, and document infrastructure changes, including upgrades and migrations. • Work within ITIL frameworks for incident, change, and problem management. Education & Certifications: • Bachelor’s Degree in Computer Science, Network Engineering, or related field (or equivalent experience). • 10+ years of experience in global network security environments. • Preferred certifications: • CCNP / CCIE • JNCIE • Security certifications (CISSP, CISM, or equivalent) are a plus Key Differentiators Added (for your context) This version strengthens the JD by: • Embedding microsegmentation as a core capability (not just one bullet) • Aligning with Zero Trust and application dependency mapping (important for your programs) • Emphasizing cross-team collaboration with application owners (critical for rollout success) • Integrating segmentation with existing firewall + SIEM ecosystem (not replacing, but complementing) About US Tech Solutions: US Tech Solutions is a global staff augmentation firm providing a wide range of talent on-demand and total workforce solutions. To know more about US Tech Solutions, please visit www.ustechsolutions.com. US Tech Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran. AI Statement: By applying, you acknowledge that AI-assisted tools may be used during hiring. #LI-AS140

Requirements

Must-haves

Duration: 6+ Months Contract
Translate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs.
Develop and support comprehensive solutions that meet requirements and align with client’s global network security and microsegmentation strategy .
Develop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models .
Lead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments.
Architect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access .
Design and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement.
Collaborate with application owners to Client, validate, and map application dependencies to enable policy-driven segmentation.
Define and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments.
Integrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement.
Lead adoption of microsegmentation platforms (e.g , Guardicore/Akamai Segmentation ).
Develop segmentation governance models , policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks).
Participate in network security design reviews and ensure all implementations meet enterprise security standards.
Analyze business requirements to design and implement security across data centers, campus networks, and hybrid environments .
Provide ongoing risk metrics, control effectiveness tracking, and security posture reporting .
Conduct and support internal and external security audits and compliance assessments .
Maintain awareness of emerging threats and update policies accordingly.
Develop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems.
Manage and optimize Security Information and Event Management (SIEM) systems.
Collaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence.
Strong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments.
Proven capability to build application-aware segmentation policies based on traffic flow analysis.
Experience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms.

Nice-to-haves

Security certifications (CISSP, CISM, or equivalent) are a plus

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsgcpapiai

Platform: jobdiva
Effort: medium