Senior Microsegmentation Engineer – Zero Trust

CareCone Group; Sydney; On-site; AUD 150,000 - 210,000; Full time

Job summary

CareCone Group is seeking an experienced Microsegmentation Technical Expert to lead design, POC, implementation, and optimisation of microsegmentation within a large-scale network and cloud environment in Sydney.

The role combines cybersecurity and networking expertise, including hands-on microsegmentation experience and solid knowledge of IP routing, switching, firewalls, MPLS, BGP, OSPF/IS-IS, SDN, cloud, and virtualization.

Qualifications

• 5–10 years experience in network and/or security engineering with microsegmentation, workload protection, or Zero Trust implementations.
• Strong hands-on experience with IP routing and switching in large, complex environments.
• Strong knowledge of firewalls, security policy/rule design, and zone-based security.
• Experience with MPLS and service-provider networking, including BGP, OSPF/IS-IS, MPLS L2/L3 VPNs, and traffic engineering.
• Hands-on exposure to microsegmentation technologies such as Cisco, Illumio, ColorTokens, or equivalent solutions.
• Strong understanding of TCP/IP, DNS, HTTP, firewalls, SDN, and network security.
• Experience with virtualization and container technologies such as OpenShift, VMware, Kubernetes, and Docker.
• Knowledge of identity-based segmentation and Zero Trust security models.
• Familiarity with SIEM, EDR, NDR, and security analytics platforms.

Responsibilities

• Support the Technical Lead with the microsegmentation POC and target-state solution design.
• Design microsegmentation strategies aligned with Zero Trust and secure-by-design principles.
• Develop segmentation policies across applications, workloads, and environments.
• Produce high-level and low-level designs (HLD/LLD).
• Define trust boundaries, security zones, traffic flows, and segmentation requirements.
• Ensure segmentation designs integrate with existing routing, switching, firewall, MPLS, cloud, and network architecture.
• Implement microsegmentation solutions using Cisco Macro/Microsegmentation, Illumio, ColorTokens, or equivalent platforms.
• Configure security policies based on least-privilege principles.
• Integrate microsegmentation platforms with firewalls, routers, switches, SIEM, identity platforms, and other security technologies.
• Troubleshoot connectivity, routing, forwarding, policy conflicts, and enforcement issues.
• Support Zero Trust Architecture implementation and alignment with security frameworks (NIST, ISO 27001, CIS).
• Assist risk assessments, threat modelling, compliance, and audit-readiness activities.

Skills

Microsegmentation

Zero Trust

IP routing

Switching

Firewalls

MPLS

BGP

OSPF/IS-IS

SDN

Cloud

Virtualisation

OpenShift

VMware

Kubernetes

Docker

Identity-based segmentation

SIEM

EDR

NDR

Security analytics

Tools

Cisco Macro/Microsegmentation

Illumio

ColorTokens

Job description

CareCone Group is seeking an experienced Microsegmentation Technical Expert to lead design, POC, implementation, and optimisation of microsegmentation within a large-scale network and cloud environment in Sydney.

The role combines cybersecurity and networking expertise, including hands-on microsegmentation experience and solid knowledge of IP routing, switching, firewalls, MPLS, BGP, OSPF/IS-IS, SDN, cloud, and virtualization.