Senior Network Engineer - Microsegmentation

Job Title : Senior Network Engineer - Micro segmentation Specialist (Illumio)

Location : Airoli - Navi Mumbai

Department : IT - Network

Job Type : Full-Time

Position Overview :

Key Responsibilities :

- Architect and implement Illumio Core or Illumio Endpoint microsegmentation in enterprise environments.

- Lead the discovery, policy planning, simulation, and enforcement phases of segmentation deployment.

- Define and enforce least-privilege access controls across workloads (on-prem and cloud).

- Work closely with Cyber security teams to ensure alignment with Zero Trust and compliance mandates (e.g., PCI-DSS, HIPAA, NIST).

- Continuously monitor application flows using Illumios Explorer, PCE, and VENs.

- Create, simulate, and refine segmentation policies using Illumio Policy Compute Engine (PCE).

- Integrate Illumio with SIEM, CMDB, and automation tools for policy and event management.

- Maintain thorough documentation of network/security architecture, policy sets, and deployment methodologies.

- Perform impact analysis, risk assessments, and network flow analysis using tools like Illumio Map.

Required Qualifications :

- Bachelor's degree in Computer Science, Engineering, Information Security, or a related field.

- 10+ years of enterprise networking experience, with at least 2+ years of hands-on Illumio implementation experience.

- In-depth understanding of TCP/IP, VLANs, routing, BGP/OSPF, firewall policies, and application dependencies.

- Experience with segmentation policy creation, simulation mode analysis, and enforcement strategies.

- Knowledge of Linux/Windows server environments and virtualization platforms (VMware, Hyper-V).

- Experience integrating Illumio with tools such as ServiceNow, Splunk, or SIEM platforms.

- Strong grasp of security principles : Zero Trust, least privilege, east-west traffic control.

- Familiarity with public cloud platforms (AWS, Azure, GCP) and hybrid deployments.

Preferred Certifications (Nice to Have) :

- CCNP, CCIE, CISSP

- Knowledge of scripting/automation (Python, Ansible, PowerShell) is a plus