At Tech Mahindra (Tech Mahindra | Connected World, Connected Experiences), we live the philosophy of connected world and connected experiences. We thrive on change that is powered by the intelligent symphony of technology and humans designing meaningful and sustainable experiences. Consumer ‘experiences’ are driving and disrupting industries like never before. Businesses must build seamless yet simple enterprises that collaborate, synergize, and drive the change. Change that connects us all and empowers us to deliver experiences that span across the digital, the physical, the convergent, and everything in between. That’s when truly connected experiences manifest.

Role Overview

The Microsegmentation Technical Expert is responsible for designing, implementing, and managing advanced network microsegmentation solutions to enhance the organisation's cybersecurity posture. This role supports the Technical Lead in microsegmentation proof-of-concept (POC) and target-state design, with a strong focus on Zero Trust architecture, workload-level security, and minimising lateral movement across complex network environments.

As the solution is deployed within a carrier-grade telecommunications workplace, this role requires strong networking expertise alongside security knowledge. The position combines hands-on microsegmentation experience with deep understanding of IP routing, switching, firewall technologies, MPLS, and service provider networking to ensure seamless integration with existing transport and cloud networks.

Key Responsibilities

- Support the Technical Lead in delivering microsegmentation POC and target-state architecture.




- Design and implement segmentation strategies aligned with Zero Trust and secure-by-design principles.
- Develop segmentation policies for applications, workloads, and environments.
- Produce high-level and low-level designs (HLD/LLD) for security segmentation solutions.
- Define trust boundaries, segmentation zones, and traffic flows considering routing, switching, and MPLS transport paths.

Implementation & Deployment

- Deploy microsegmentation solutions such as Cisco, Illumio, ColorTokens, or equivalent platforms.
- Configure and enforce least-privilege security policies.
- Integrate segmentation solutions with existing infrastructure (firewalls, routers, switches, SIEM, identity platforms, etc.).

Security & Compliance

- Align solutions with cybersecurity frameworks such as Zero Trust (NIST 800-207), ISO 27001, and CIS Controls.
- Ensure regulatory compliance and audit readiness.
- Conduct risk assessments and threat modelling.
- Monitor policy enforcement and traffic behaviour across segmented environments.
- Continuously refine segmentation rules for improved performance and security.
- Troubleshoot policy conflicts, connectivity issues, routing or forwarding problems, and enforcement anomalies.

Stakeholder Engagement

- Collaborate with security, network, application, and cloud/platform teams.




- Provide technical guidance and training to internal stakeholders.
- Coordinate with vendors and manage technical escalations.

Documentation & Reporting

- Develop and maintain architecture diagrams, policy definitions, and operational procedures.
- Generate reports and dashboards on segmentation effectiveness and risk reduction.

Required Skills & Experience

Networking Foundations (Essential)

- Robust hands-on experience with IP routing and switching in large-scale enterprise or carrier environments.
- Solid firewall expertise including policy design and zone-based security.
- Working knowledge of MPLS and service provider routing (BGP, OSPF/IS-IS, L2/L3 VPNs).
- Ability to map segmentation design to underlying network topology.
- Experience with microsegmentation or workload protection platforms (e.g., Cisco, Illumio, ColorTokens).
- Deep understanding of TCP/IP, DNS, HTTP, and firewall technologies.
- Experience with virtualisation platforms (OpenShift, VMware, VIO, etc.).
- Familiarity with SDN, Kubernetes, and container security.
- Knowledge of identity-based segmentation and Zero Trust models.

Security Expertise

- Experience implementing Zero Trust Architecture.
- Strong understanding of cyber threats and lateral movement techniques.
- Familiarity with SIEM, EDR, NDR, and analytics tools.

Soft Skills

- Strong analytical and problem-solving abilities.
- Excellent communication and stakeholder management skills.
- Ability to translate technical concepts into business language.

Qualifications

- Preferred certifications:
- CISSP, CISM, or CCSP
- Cisco certifications (CCNP/C

📌 Microsegmentation Technical Expert (Sydney)
🏢 Tech Mahindra
📍 Sydney