We are looking for an experienced Microsegmentation Technical Expert to support a major cybersecurity and network security transformation program in Sydney.

The role will focus on the design, Proof of Concept (POC), implementation, and optimisation of microsegmentation solutions within a large-scale, highly complex network and cloud environment.

This position requires a strong combination of cybersecurity and networking expertise. The successful candidate will have hands-on microsegmentation or Zero Trust experience together with solid knowledge of IP routing, switching, firewalls, MPLS, BGP, OSPF/IS-IS, SDN, cloud, and virtualisation technologies.

Key Responsibilities

- Support the Technical Lead with the microsegmentation POC and target-state solution design.
- Design microsegmentation strategies aligned with Zero Trust and secure-by-design principles.
- Develop segmentation policies across applications, workloads, and environments.
- Produce high-level and low-level designs (HLD/LLD).
- Define trust boundaries, security zones, traffic flows, and segmentation requirements.
- Ensure segmentation designs integrate effectively with existing routing, switching, firewall, MPLS, cloud, and network architecture.

Implementation & Deployment

- Implement microsegmentation solutions using technologies such as Cisco Macro/Microsegmentation, Illumio, ColorTokens, or equivalent platforms.
- Configure security policies based on least-privilege principles.
- Integrate microsegmentation platforms with firewalls, routers, switches, SIEM, identity platforms, and other security technologies.
- Troubleshoot connectivity, routing, forwarding, policy conflicts, and enforcement issues.

Security & Zero Trust





- Support the implementation of Zero Trust Architecture.
- Align solutions with recognised security frameworks, including NIST 800-207, ISO 27001, and CIS Critical Security Controls.
- Support risk assessments, threat modelling, compliance, and audit-readiness activities.
- Continuously refine segmentation policies to reduce attack surface and lateral movement risks.

Stakeholder Engagement

- Work closely with cybersecurity, network engineering, cloud/platform, infrastructure, and application teams.
- Provide technical guidance on microsegmentation and Zero Trust principles.
- Engage with technology vendors and support technical escalations.
- Maintain architecture diagrams, security policies, operational procedures, and technical documentation.
- 5–10 years' experience in network and/or security engineering with microsegmentation, workload protection, or Zero Trust implementations.
- Solid hands-on experience with IP routing and switching in large, complex environments.
- Strong knowledge of firewalls, security policy/rule design, and zone-based security.
- Experience with MPLS and service-provider networking, including technologies such as:
- BGP
- OSPF / IS-IS
- MPLS L2/L3 VPNs
- Traffic engineering
- Hands-on exposure to microsegmentation technologies such as Cisco, Illumio, ColorTokens, or equivalent solutions.
- Strong understanding of TCP/IP, DNS, HTTP, firewalls, SDN, and network security.
- Experience with virtualisation and container technologies such as OpenShift, VMware, Kubernetes, and Docker.
- Knowledge of identity-based segmentation and Zero Trust security models.
- Familiarity with SIEM, EDR, NDR, and security analytics platforms.
- Strong troubleshooting, analytical, communication, and stakeholder-management skills.

#J-18808-Ljbffr

📌 Network Security Engineer (Sydney)
🏢 CareCone Group
📍 Sydney