Senior Technical Business Analyst - Network Segmentation
12-Month Contract | Sydney Based

A client of ours is undertaking a significant network segmentation and security transformation program. We are seeking a Technical Business Analyst with genuine, hands-on network segmentation experience to join this critical initiative.

You'll play a central technical role in a major network segmentation transformation, working directly with raw network data, Network and Security Architects, and a wide range of non-technical stakeholders to define and validate exact segmentation requirements across a highly complex setting.

*This is NOT a role for Project Managers, Delivery Managers, or generic Governance/Identity BAs - we need a dedicated, technical, hands-on analyst who can get into the detail themselves, not coordinate others to do it.

The role will require:

- Granular Network Mapping: Parse raw network traffic logs yourself to build precise connectivity matrices (Source IP → Destination IP → Port → Protocol → Action rules) for micro-segmented zones from scratch — this is not delegated to the engineering team.
- Architectural Engagement: Engage in detailed, technical design discussions with Network and Security Architects, with the depth to challenge and validate proposed approaches to requirement realisation.
- Cross-Domain Stakeholder Engagement: Work directly with diverse, non-technical Subject Matter Experts across academic, research, facilities,



and Operational Technology (OT) domains to extract precise application dependencies and segmentation requirements.

Experience required:

- Experience with internal firewall routing, Out-of-Band (OoB) management network uplifts, load balancer re-architecture, legacy proxy uplifts to Enterprise Proxy solutions, and /16 IP address rationalisation.
- Hands-on experience defining granular, host-based isolation policies (e.g. Illumio) to restrict lateral movement across production, non-production, and load-balanced workloads.
- A proven background translating flat networks into zoned architectures using Secure SD-WAN, VRFs, advanced NAC solutions (e.g. Aruba ClearPass enhancements), and core switch ACL hardening.
- Experience mapping requirements for the transition to cloud-delivered security, including: Zero Trust Network Access (ZTNA), Secure Web Gateways (SWG), Cloud Access Security Broker (CASB), Data Loss Prevention (DLP)
- Proven ability to shift environments from implicit network trust to identity-aware policies.
- Familiarity with uplifting Network Traffic Analysis (NTA), deploying Deep Packet Inspection (DPI) and Server Name Indication (SNI) on perimeter firewalls (e.g. Palo Alto), and extending cybersecurity postures into Operational Technology (OT) environments.

If you're a technical BA who genuinely gets into the network logs, the architecture conversations, and the SME workshops yourself - we want to hear from you!

📌 Senior Technical Business Analyst (12-month contract) (Sydney)
🏢 Pathway Search
📍 Sydney