Micro-Segmentation Security Engineer

Role & responsibilities

Youre good at what you do and possess the required experience to prove it. However, equally as important you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused someone who prioritizes customer success in their work. And finally, you’re open and borderless – naturally inclusive in how you work with others.

Required Skills and Experience:

• In-depth hands-on experience with Akamai Guardicore Centra platform – segmentation, policy enforcement, and agent deployment.
• Strong understanding of Zero Trust segmentation, lateral movement prevention, and east-west traffic control.
• Expertise in network protocols, ports, and services (TCP/IP, DNS, HTTP/S, RDP, SMB, SQL, etc.).
• Experience managing Windows and Linux workloads in both on-premises and cloud (Azure/AWS) environments.
• Familiarity with firewalls, EDR, and SIEM platforms for data correlation and alert triage.
• Ability to analyze packet captures (PCAPs) and use network visualization tools for dependency mapping.
• Scripting or automation experience (PowerShell, Python, REST APIs) for agent management or reporting automation.
• Working knowledge of WAF, CASB, and SOAR tools to integrate segmentation data into broader security workflows.
• Understanding of microservices, container environments (Kubernetes, Docker) and segmentation in modern architectures.

Preferred candidate profile

Key Responsibilities

1. Micro-Segmentation Policy Management

• Design, implement, and maintain micro-segmentation policies across data center, cloud, and hybrid workloads using Akamai Guardicore.
• Enforce identity-based access controls and application ring-fencing to contain lateral movement and minimize attack surfaces.
• Apply tiered segmentation (Web, App, DB) and nano-segmentation (port, protocol, process-level) to protect critical assets and sensitive data flows.
• Collaborate with application owners to define and validate least-privilege access policies that align with Zero Trust Architecture (ZTA).
• Continuously review segmentation rules to ensure minimal disruption to production workloads while maintaining strong security posture.

2. Visibility, Monitoring & Anomaly Detection

• Maintain Layer 4 and Layer 7 visibility into network and application traffic using Akamai dashboards, flow maps, and visual analytics.
• Monitor real-time communication patterns to detect anomalies, unauthorized connections, and segmentation policy violations.
• Support ransomware containment and quarantine strategies through real-time telemetry and automated isolation.
• Investigate segmentation breaches and unauthorized access attempts, correlating data with SIEM and EDR tools.
• Generate and present visibility maps for audit, compliance, and architecture governance reviews.

3. Platform Administration & Integration

• Deploy, configure, and manage Akamai Guardicore agents across Windows, Linux, and virtualized workloads (VMware, Azure, AWS).

• Validate agent health, version compliance, and telemetry integrity across distributed environments.

• Integrate Akamai Guardicore with:

• Native firewalls and security controls (Windows Firewall, Azure NSG, AWS Security Groups)

• REST APIs and third-party orchestration tools

• SIEM, SOAR, and EDR platforms for unified policy enforcement and response automation.

• Support SaaS and on-premises deployment models, including remote aggregation nodes for distributed sites or OT networks.

• Manage platform patching, upgrades, and license renewals in collaboration with Akamai support and OEM partners.

4. Incident Management & Forensics

• Review and validate segmentation violations and unauthorized access events flagged by the platform or SOC.
• Perform incident triage and root cause analysis (RCA) in collaboration with L3 Akamai SMEs, SOC analysts, and incident response teams.
• Develop and document incident playbooks for rapid response, isolation, and policy remediation.
• Contribute to forensic investigations by providing detailed traffic insights, communication path mapping, and historical telemetry.
• Maintain an updated knowledge base of known segmentation exceptions, approved flows, and remediation steps.

5. Governance, Reporting & Continuous Improvement

• Participate in Cyber Defense Center (CDC) governance reviews, transition planning, and new environment onboarding.
• Support SLA and KPI reporting by generating metrics from Akamai dashboards—covering coverage percentage, policy accuracy, violation trends, and containment efficiency.
• Maintain detailed documentation of network maps, policy configurations, agent deployments, and integration touchpoints.
• Collaborate with cross-domain SMEs (WAF, EDR, DLP, SOAR, SIEM) to align segmentation with enterprise Zero Trust and Defense-in-Depth strategies.
• Propose enhancements to automation, orchestration, and analytics workflows through PowerShell, Python, or API-based integrations.