We are looking for an experienced
Microsegmentation Technical Expert
to support a major cybersecurity and network security transformation program in Sydney.
The role will focus on the
design, Proof of Concept (POC), implementation, and optimisation of microsegmentation solutions
within a large-scale, highly complex network and cloud environment.
This position requires a strong combination of
cybersecurity and networking expertise
. The successful candidate will have hands-on microsegmentation or Zero Trust experience together with solid knowledge of
IP routing, switching, firewalls, MPLS, BGP, OSPF/IS-IS, SDN, cloud, and virtualisation technologies
.
Key Responsibilities
Support the Technical Lead with the microsegmentation POC and target-state solution design.
Design microsegmentation strategies aligned with
Zero Trust
and secure-by-design principles.
Develop segmentation policies across applications, workloads, and environments.
Produce high-level and low-level designs (HLD/LLD).
Define trust boundaries, security zones, traffic flows, and segmentation requirements.
Ensure segmentation designs integrate effectively with existing routing, switching, firewall, MPLS, cloud, and network architecture.
Implementation & Deployment
Implement microsegmentation solutions using technologies such as
Cisco Macro/Microsegmentation, Illumio, ColorTokens, or equivalent platforms
.
Configure security policies based on least-privilege principles.
Integrate microsegmentation platforms with firewalls, routers, switches, SIEM, identity platforms, and other security technologies.
Troubleshoot connectivity, routing, forwarding, policy conflicts, and enforcement issues.
Security & Zero Trust




Support the implementation of Zero Trust Architecture.
Align solutions with recognised security frameworks, including
NIST *******, ISO *****, and CIS Critical Security Controls
.
Support risk assessments, threat modelling, compliance, and audit-readiness activities.
Continuously refine segmentation policies to reduce attack surface and lateral movement risks.
Stakeholder Engagement
Work closely with cybersecurity, network engineering, cloud/platform, infrastructure, and application teams.
Provide technical guidance on microsegmentation and Zero Trust principles.
Engage with technology vendors and support technical escalations.
Maintain architecture diagrams, security policies, operational procedures, and technical documentation.
5–10 years' experience
in network and/or security engineering with microsegmentation, workload protection, or Zero Trust implementations.
Strong hands-on experience with
IP routing and switching
in large, complex environments.
Robust knowledge of
firewalls, security policy/rule design, and zone-based security
.
Experience with
MPLS and service-provider networking
, including technologies such as:
BGP
OSPF / IS-IS
MPLS L2/L3 VPNs
Traffic engineering
Hands-on exposure to microsegmentation technologies such as
Cisco, Illumio, ColorTokens, or equivalent solutions
.
Strong understanding of
TCP/IP, DNS, HTTP, firewalls, SDN, and network security
.
Experience with virtualisation and container technologies such as
OpenShift, VMware, Kubernetes, and Docker
.
Knowledge of identity-based segmentation and Zero Trust security models.
Familiarity with
SIEM, EDR, NDR, and security analytics platforms
.
Strong troubleshooting, analytical, communication, and stakeholder-management skills.

📌 Network Security Engineer (New South Wales)
🏢 CareCone Group
📍 New South Wales