Network Engineer

• The Network Segmentation Engineer is responsible for designing, implementing, and maintaining secure network segmentation strategies to reduce the attack surface, enhance data protection, and support compliance with cybersecurity standards.
• This role involves close collaboration with network engineering, cybersecurity, compliance, and business units to ensure segmentation supports both security and operational requirements.

Technical Skills

1. Networking Knowledge

• Very strong understanding of TCP/IP stack
• Deep understanding of common network ports and protocols: TCP/UDP ports, HTTP/S, FTP, DNS, DHCP, SMTP, SNMP, ICMP, SSH, RDP, SMB, SIP, and more.
• Familiarity with Layer 2 and Layer 3 segmentation (e.g., VLANs, subnets)

2. Security Expertise

• Knowledge of firewall/access technologies (e.g., Palo Alto, Juniper, ACLs on both Cisco and Juniper)
• Experience with Zero Trust architecture and microsegmentation (e.g., Illumio, Guardicore)
• Experience with host based firewalling (e.g., Windows Defender, IPtables)

3. Tools & Platforms

• Network tracing tools (e.g., Wireshark)
• Configuration management tools (e.g., Ansible, Python)
• Network monitoring tools (e.g., NetFlow, FlowMon, SNMP, Grafana, Prometheus)

Soft Skills & Responsibilities

1. Analytical Thinking

• Ability to assess network traffic flows and segment based on application or sensitivity
• Threat modeling and attack surface analysis

2. Documentation & Compliance

• Strong documentation skills for network diagrams, segmentation policies, and change management

3. Project Management

• Support segmentation projects from planning through execution
• Strong communication skills
• Collaborate with different stake holders like security, application owners, application managers and end-users

4. Incident Response & Troubleshooting

• Troubleshoot issues related to misconfigured segments or access
• Participate in incident response related to lateral movement or segmentation failures

Communication Skills

1. Clear Technical Communication

• Ability to explain complex network segmentation concepts and security implications clearly to both technical and non-technical stakeholders, including management, auditors, and cross-functional teams.

2. Collaboration

• Work closely with network engineers, security teams, application owners, and compliance officers to design and implement segmentation strategies that meet business and security requirements.

3. Documentation

• Produce precise and comprehensive documentation for network designs, segmentation policies, standard operating procedures, and incident reports.

4. Training & Support

• Provide guidance, training, and knowledge transfer to team members or end-users about network segmentation best practices and security policies.

5. Stakeholder Engagement

• Participate in meetings, risk assessments, and project planning sessions with various stakeholders, ensuring alignment on segmentation goals and constraints.