Location: Sydney, NSWEmployment Type:6-Month Contract About the Role

We are looking for an experienced Microsegmentation Technical Expert to support a major cybersecurity and network security transformation program in Sydney. The role will focus on the design, Proof of Concept (POC), implementation, and optimisation of microsegmentation solutions within a large-scale, highly complex network and cloud environment. This position requires a strong combination of cybersecurity and networking expertise. The successful candidate will have hands-on microsegmentation or Zero Trust experience together with solid knowledge of IP routing, switching, firewalls, MPLS, BGP, OSPF/IS-IS, SDN, cloud, and virtualisation technologies. Key Responsibilities

Support the Technical Lead with the microsegmentation POC and target-state solution design. Design microsegmentation strategies aligned with Zero Trust and secure-by-design principles. Develop segmentation policies across applications, workloads, and environments. Produce high-level and low-level designs (HLD/LLD). Define trust boundaries, security zones, traffic flows, and segmentation requirements. Ensure segmentation designs integrate effectively with existing routing, switching, firewall, MPLS, cloud, and network architecture. Implementation & Deployment

Implement microsegmentation solutions using technologies such as Cisco Macro/Microsegmentation, Illumio, ColorTokens, or equivalent platforms. Configure security policies based on least-privilege principles. Integrate microsegmentation platforms with firewalls, routers, switches, SIEM, identity platforms, and other security technologies. Troubleshoot connectivity, routing, forwarding, policy conflicts, and enforcement issues. Security & Zero Trust





Support the implementation of Zero Trust Architecture. Align solutions with recognised security frameworks, including NIST 800-207, ISO 27001, and CIS Critical Security Controls. Support risk assessments, threat modelling, compliance, and audit-readiness activities. Continuously refine segmentation policies to reduce attack surface and lateral movement risks. Stakeholder Engagement

Work closely with cybersecurity, network engineering, cloud/platform, infrastructure, and application teams. Provide technical guidance on microsegmentation and Zero Trust principles. Engage with technology vendors and support technical escalations. Maintain architecture diagrams, security policies, operational procedures, and technical documentation. 5-10 years' experience in network and/or security engineeringwith microsegmentation, workload protection, or Zero Trust implementations. Strong hands-on experience with IP routing and switching in large, complex environments. Strong knowledge of firewalls, security policy/rule design, and zone-based security. Experience with MPLS and service-provider networking, including technologies such as:

BGP OSPF / IS-IS MPLS L2/L3 VPNs Traffic engineering

Hands-on exposure to microsegmentation technologies such as Cisco, Illumio, ColorTokens, or equivalent solutions. Robust understanding of TCP/IP, DNS, HTTP, firewalls, SDN, and network security. Experience with virtualisation and container technologies such as OpenShift, VMware, Kubernetes, and Docker. Knowledge of identity-based segmentation and Zero Trust security models. Familiarity with SIEM, EDR, NDR, and security analytics platforms. Strong troubleshooting, analytical, communication, and stakeholder-management skills.

#J-18808-Ljbffr

📌 Microsegmentation Technical Expert (Haymarket)
🏢 Tech Mahindra
📍 Haymarket