Network Security Engineer

RIT Solutions is recruiting for a confidential client seeking a Network & Micro-Segmentation Security Engineer. The role designs and implements zero-trust segmentation across hybrid cloud and data center environments, while optimizing Palo Alto firewalls and micro-segmentation platforms. It also supports automation, change management, and network security incident resolution.

Responsibilities:

• Design, implement, and maintain micro-segmentation policies, including application dependency mapping, rule-set creation, and policy enforcement across hybrid workloads (AWS, Azure, Data Center)
• Configure, modify, and optimize Palo Alto firewalls (via Panorama), site-to-site VPNs, security profiles, whitelisting, and content filtering
• Monitor agent health, performance, and capacity for segmentation engines (Illumio Core/Cloud or Guardicore/Akamai) across global environments
• Develop network automation scripts using Python, Ansible, or Terraform to streamline firewall rule pushes, security updates, and segmentation policy changes
• Execute change management workflows including peer reviews, change requests, impact validation, and post-deployment traffic analysis for east-west and north-south traffic flows
• Provide escalation support and incident resolution for complex network, routing, and segmentation failures, participating in a 24x7 on-call rotation as needed
• Design, implement, and maintain micro-segmentation policies using Illumio or Guardicore across hybrid workload environments
• Manage, configure, and optimize Palo Alto firewalls and Panorama management systems
• Perform application dependency mapping, policy testing, traffic flow validation, and enforcement across cloud and data center networks
• Utilize automation tools (Python, Terraform, Ansible) to streamline rule pushes and configuration baselines
• Troubleshoot complex network security issues, participate in change management processes, and join a 24x7 on-call rotation

Requirements:

• Bachelor's degree in Computer Science, IT, Engineering, or related field explicitly required by client
• Deep hands-on experience configuring, troubleshooting, and engineering Palo Alto firewalls, Panorama, and security profiles
• Direct operational experience creating policies, mapping application dependencies, and enforcing rules using Illumio Core/Cloud or Guardicore
• Architectural and hands-on experience managing routing, security groups, and firewalls within AWS and Azure
• 8+ years of hands-on networking and network security experience with expertise in Palo Alto firewalls, Panorama, and security profiles
• 5+ years in global network architecture or design incorporating zero-trust network segmentation principles
• Proven experience with micro-segmentation platforms such as Illumio Core/Cloud or Guardicore (Akamai Segmentation), including application dependency mapping and policy creation
• Strong cloud networking foundation in AWS and Azure, including cloud firewalling, hybrid routing, and site-to-site VPNs
• The ideal candidate is a senior-level, self-starting Network Security Engineer with broad enterprise experience in zero-trust architecture and micro-segmentation
• They exhibit strong problem-solving skills across complex cloud and data center environments and possess exceptional communication skills to collaborate seamlessly across global teams
• Network automation fluency using Terraform, Ansible, or Python
• Prior experience implementing ITIL-aligned change management practices in global enterprise environments
• Knowledge of advanced routing protocols (BGP, OSPF, VXLAN) and wireless network infrastructure
• Network automation experience using Terraform, Ansible, or Python for policy deployment
• Working knowledge of core network protocols and technologies: BGP, OSPF, VXLAN, TCP/IP stack, DNS, DHCP, and SD-WAN
• Understanding of ITIL processes, formal change management, and disaster recovery exercises for segmented application paths
• Experience with wireless network design and troubleshooting