Network Security Engineer

CareCone Group; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

CareCone Group is seeking an experienced Microsegmentation Technical Expert to lead design, POC, implementation, and optimisation of microsegmentation within a large-scale network and cloud environment in Sydney.

The role combines cybersecurity and networking expertise, including hands-on microsegmentation experience and solid knowledge of IP routing, switching, firewalls, MPLS, BGP, OSPF/IS-IS, SDN, cloud, and virtualization.

Qualifications

• 5–10 years experience in network and/or security engineering with microsegmentation, workload protection, or Zero Trust implementations.
• Strong hands-on experience with IP routing and switching in large, complex environments.
• Strong knowledge of firewalls, security policy/rule design, and zone-based security.
• Experience with MPLS and service-provider networking, including BGP, OSPF/IS-IS, MPLS L2/L3 VPNs, and traffic engineering.
• Hands-on exposure to microsegmentation technologies such as Cisco, Illumio, ColorTokens, or equivalent solutions.
• Strong understanding of TCP/IP, DNS, HTTP, firewalls, SDN, and network security.
• Experience with virtualization and container technologies such as OpenShift, VMware, Kubernetes, and Docker.
• Knowledge of identity-based segmentation and Zero Trust security models.
• Familiarity with SIEM, EDR, NDR, and security analytics platforms.

Responsibilities

• Support the Technical Lead with the microsegmentation POC and target-state solution design.
• Design microsegmentation strategies aligned with Zero Trust and secure-by-design principles.
• Develop segmentation policies across applications, workloads, and environments.
• Produce high-level and low-level designs (HLD/LLD).
• Define trust boundaries, security zones, traffic flows, and segmentation requirements.
• Ensure segmentation designs integrate with existing routing, switching, firewall, MPLS, cloud, and network architecture.
• Implement microsegmentation solutions using Cisco Macro/Microsegmentation, Illumio, ColorTokens, or equivalent platforms.
• Configure security policies based on least-privilege principles.
• Integrate microsegmentation platforms with firewalls, routers, switches, SIEM, identity platforms, and other security technologies.
• Troubleshoot connectivity, routing, forwarding, policy conflicts, and enforcement issues.
• Support Zero Trust Architecture implementation and alignment with security frameworks (NIST, ISO 27001, CIS).
• Assist risk assessments, threat modelling, compliance, and audit-readiness activities.

Skills

Microsegmentation

Zero Trust

IP routing

Switching

Firewalls

MPLS

BGP

OSPF/IS-IS

SDN

Cloud

Virtualisation

OpenShift

VMware

Kubernetes

Docker

Identity-based segmentation

SIEM

EDR

NDR

Security analytics

Tools

Cisco Macro/Microsegmentation

Illumio

ColorTokens

Job description

We are looking for an experienced Microsegmentation Technical Expert to support a major cybersecurity and network security transformation program in Sydney.

The role will focus on the design, Proof of Concept (POC), implementation, and optimisation of microsegmentation solutions within a large-scale, highly complex network and cloud environment.

This position requires a strong combination of cybersecurity and networking expertise. The successful candidate will have hands-on microsegmentation or Zero Trust experience together with solid knowledge of IP routing, switching, firewalls, MPLS, BGP, OSPF/IS-IS, SDN, cloud, and virtualisation technologies.

Key Responsibilities

• Support the Technical Lead with the microsegmentation POC and target-state solution design.
• Design microsegmentation strategies aligned with Zero Trust and secure-by-design principles.
• Develop segmentation policies across applications, workloads, and environments.
• Produce high-level and low-level designs (HLD/LLD).
• Define trust boundaries, security zones, traffic flows, and segmentation requirements.
• Ensure segmentation designs integrate effectively with existing routing, switching, firewall, MPLS, cloud, and network architecture.

Implementation & Deployment

• Implement microsegmentation solutions using technologies such as Cisco Macro/Microsegmentation, Illumio, ColorTokens, or equivalent platforms.
• Configure security policies based on least-privilege principles.
• Integrate microsegmentation platforms with firewalls, routers, switches, SIEM, identity platforms, and other security technologies.
• Troubleshoot connectivity, routing, forwarding, policy conflicts, and enforcement issues.

Security & Zero Trust

• Support the implementation of Zero Trust Architecture.
• Align solutions with recognised security frameworks, including NIST 800-207, ISO 27001, and CIS Critical Security Controls.
• Support risk assessments, threat modelling, compliance, and audit-readiness activities.
• Continuously refine segmentation policies to reduce attack surface and lateral movement risks.

Stakeholder Engagement

• Work closely with cybersecurity, network engineering, cloud/platform, infrastructure, and application teams.
• Provide technical guidance on microsegmentation and Zero Trust principles.
• Engage with technology vendors and support technical escalations.
• Maintain architecture diagrams, security policies, operational procedures, and technical documentation.
• 5–10 years' experience in network and/or security engineering with microsegmentation, workload protection, or Zero Trust implementations.
• Strong hands-on experience with IP routing and switching in large, complex environments.
• Strong knowledge of firewalls, security policy/rule design, and zone-based security.
• Experience with MPLS and service-provider networking, including technologies such as:
• BGP
• OSPF / IS-IS
• MPLS L2/L3 VPNs
• Traffic engineering
• Hands-on exposure to microsegmentation technologies such as Cisco, Illumio, ColorTokens, or equivalent solutions.
• Strong understanding of TCP/IP, DNS, HTTP, firewalls, SDN, and network security.
• Experience with virtualisation and container technologies such as OpenShift, VMware, Kubernetes, and Docker.
• Knowledge of identity-based segmentation and Zero Trust security models.
• Familiarity with SIEM, EDR, NDR, and security analytics platforms.
• Strong troubleshooting, analytical, communication, and stakeholder-management skills.