Microsegmentation Technical Expert

Tech Mahindra; Sydney; On-site; AUD 130,000 - 180,000; Full time

Job summary

Tech Mahindra seeks a Microsegmentation Technical Expert to design, implement, and manage advanced segmentation solutions within a carrier-grade network environment. You will support POC efforts and target-state design focused on Zero Trust and workload security.

The role requires deep networking know-how, with expertise in IP routing, switching, MPLS, firewalls, and integration with cloud and on-prem infrastructures. Collaboration with security, network, and cloud teams is essential.

Qualifications

• Experience with microsegmentation or workload protection platforms.
• Strong network engineering background in large-scale environments.
• Knowledge of Zero Trust models and security architectures.

Responsibilities

• Support Tech Lead in delivering microsegmentation POC and target-state architecture.
• Design segmentation strategies aligned with Zero Trust principles.
• Develop segmentation policies for applications, workloads and environments.

Skills

IP routing

Firewall security

MPLS routing

Segmentation design

Microsegmentation

TCP/IP basics

Virtualization

SDN & Kubernetes

Zero Trust

Identity-based segmentation

Tools

Cisco

Illumio

ColorTokens

SIEM

Job description

At Tech Mahindra (Tech Mahindra | Connected World, Connected Experiences), we live the philosophy of connected world and connected experiences. We thrive on change that is powered by the intelligent symphony of technology and humans designing meaningful and sustainable experiences. Consumer ‘experiences’ are driving and disrupting industries like never before. Businesses must build seamless yet simple enterprises that collaborate, synergize, and drive the change. Change that connects us all and empowers us to deliver experiences that span across the digital, the physical, the convergent, and everything in between. That’s when truly connected experiences manifest.

Role Overview

The Microsegmentation Technical Expert is responsible for designing, implementing, and managing advanced network microsegmentation solutions to enhance the organisation's cybersecurity posture. This role supports the Technical Lead in microsegmentation proof-of-concept (POC) and target-state design, with a strong focus on Zero Trust architecture, workload-level security, and minimising lateral movement across complex network environments.

As the solution is deployed within a carrier-grade telecommunications environment, this role requires strong networking expertise alongside security knowledge. The position combines hands-on microsegmentation experience with deep understanding of IP routing, switching, firewall technologies, MPLS, and service provider networking to ensure seamless integration with existing transport and cloud networks.

Key Responsibilities

• Support the Technical Lead in delivering microsegmentation POC and target-state architecture.
• Design and implement segmentation strategies aligned with Zero Trust and secure-by-design principles.
• Develop segmentation policies for applications, workloads, and environments.
• Produce high-level and low-level designs (HLD/LLD) for security segmentation solutions.
• Define trust boundaries, segmentation zones, and traffic flows considering routing, switching, and MPLS transport paths.

Implementation & Deployment

• Deploy microsegmentation solutions such as Cisco, Illumio, ColorTokens, or equivalent platforms.
• Configure and enforce least-privilege security policies.
• Integrate segmentation solutions with existing infrastructure (firewalls, routers, switches, SIEM, identity platforms, etc.).

Security & Compliance

• Align solutions with cybersecurity frameworks such as Zero Trust (NIST 800-207), ISO 27001, and CIS Controls.
• Ensure regulatory compliance and audit readiness.
• Conduct risk assessments and threat modelling.
• Monitor policy enforcement and traffic behaviour across segmented environments.
• Continuously refine segmentation rules for improved performance and security.
• Troubleshoot policy conflicts, connectivity issues, routing or forwarding problems, and enforcement anomalies.

Stakeholder Engagement

• Collaborate with security, network, application, and cloud/platform teams.
• Provide technical guidance and training to internal stakeholders.
• Coordinate with vendors and manage technical escalations.

Documentation & Reporting

• Develop and maintain architecture diagrams, policy definitions, and operational procedures.
• Generate reports and dashboards on segmentation effectiveness and risk reduction.

Required Skills & Experience

Networking Foundations (Essential)

• Strong hands-on experience with IP routing and switching in large-scale enterprise or carrier environments.
• Solid firewall expertise including policy design and zone-based security.
• Working knowledge of MPLS and service provider routing (BGP, OSPF/IS-IS, L2/L3 VPNs).
• Ability to map segmentation design to underlying network topology.
• Experience with microsegmentation or workload protection platforms (e.g., Cisco, Illumio, ColorTokens).
• Deep understanding of TCP/IP, DNS, HTTP, and firewall technologies.
• Experience with virtualisation platforms (OpenShift, VMware, VIO, etc.).
• Familiarity with SDN, Kubernetes, and container security.
• Knowledge of identity-based segmentation and Zero Trust models.

Security Expertise

• Experience implementing Zero Trust Architecture.
• Strong understanding of cyber threats and lateral movement techniques.
• Familiarity with SIEM, EDR, NDR, and analytics tools.

Soft Skills

• Strong analytical and problem-solving abilities.
• Excellent communication and stakeholder management skills.
• Ability to translate technical concepts into business language.

Qualifications

• Preferred certifications:
• CISSP, CISM, or CCSP
• Cisco certifications (CCNP/CCIE)
• Vendor certifications (Illumio, Cisco, ColorTokens)
• Cloud security certifications (AWS/Azure)

Experience

• 5–10 years in network or security engineering.
• Minimum 3+ years of hands-on microsegmentation or Zero Trust implementation.
• Strong experience in routing, switching, firewall, and MPLS environments.
• Proven track record delivering complex security transformations.

Key Outcomes / KPIs

• Reduction in attack surface and lateral movement risk.
• Successful deployment of segmentation policies with minimal disruption.
• Improved visibility of application dependencies and traffic flows.
• Compliance adherence and audit readiness.

Tech Mahindra is an Equal Employment Opportunity employer. We promote and support a diverse workforce at all levels of the company. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, age, national origin or disability. All applicants will be evaluated solely on the basis of their ability, competence, and performance of the essential functions of their positions with or without reasonable accommodations. Reasonable accommodations also are available in the hiring process for applicants with disabilities.