Network Engineer

ITC Infotech; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

ITC Infotech India is seeking a Network Segmentation Engineer to design, implement, and maintain secure segmentation strategies across the enterprise. The role requires deep knowledge of TCP/IP, routing, firewalls, and modern segmentation approaches to protect data and support compliance.

You will work with network, security, and compliance teams to ensure segmentation aligns with business needs and security standards. Strong documentation and project coordination skills are essential.

Qualifications

• Experience in designing network segmentation strategies to reduce attack surface.
• Knowledge of firewall/access technologies (Palo Alto, Cisco/Juniper ACLs).
• Familiarity with Zero Trust architecture and microsegmentation.
• Experience with host-based firewalling (Windows Defender, IPtables).

Responsibilities

• Design, implement, and maintain secure segmentation to meet security standards.
• Collaborate with network, security, compliance and business teams.
• Document segmentation architectures, policies, and change management.
• Lead segmentation projects from planning through execution and testing.
• Participate in incident response related to segmentation issues.

Skills

TCP/IP mastery

Layer 2/3 segmentation

Firewall concepts

Zero Trust / microsegmentation

Network protocols knowledge

Threat modeling

Tools

Wireshark

Ansible

Python

NetFlow

Grafana

Prometheus

Job description

Job Description:

• The Network Segmentation Engineer is responsible for designing, implementing, and maintaining secure network segmentation strategies to reduce the attack surface, enhance data protection, and support compliance with cybersecurity standards.
• This role involves close collaboration with network engineering, cybersecurity, compliance, and business units to ensure segmentation supports both security and operational requirements.

Technical Skills

1. Networking Knowledge

• Very strong understanding of TCP/IP stack
• Deep understanding of common network ports and protocols: TCP/UDP ports, HTTP/S, FTP, DNS, DHCP, SMTP, SNMP, ICMP, SSH, RDP, SMB, SIP, and more.
• Familiarity with Layer 2 and Layer 3 segmentation (e.g., VLANs, subnets)

2. Security Expertise

• Knowledge of firewall/access technologies (e.g., Palo Alto, Juniper, ACLs on both Cisco and Juniper)
• Experience with Zero Trust architecture and microsegmentation (e.g., Illumio, Guardicore)
• Experience with host based firewalling (e.g., Windows Defender, IPtables)

3. Tools & Platforms

• Network tracing tools (e.g., Wireshark)
• Configuration management tools (e.g., Ansible, Python)
• Network monitoring tools (e.g., NetFlow, FlowMon, SNMP, Grafana, Prometheus)

Soft Skills & Responsibilities

1. Analytical Thinking

• Ability to assess network traffic flows and segment based on application or sensitivity
• Threat modeling and attack surface analysis

2. Documentation & Compliance

• Strong documentation skills for network diagrams, segmentation policies, and change management

3. Project Management

• Support segmentation projects from planning through execution
• Strong communication skills
• Collaborate with different stake holders like security, application owners, application managers and end-users

4. Incident Response & Troubleshooting

• Troubleshoot issues related to misconfigured segments or access
• Participate in incident response related to lateral movement or segmentation failures

Communication Skills

1. Clear Technical Communication

• Ability to explain complex network segmentation concepts and security implications clearly to both technical and non-technical stakeholders, including management, auditors, and cross-functional teams.

2. Collaboration

• Work closely with network engineers, security teams, application owners, and compliance officers to design and implement segmentation strategies that meet business and security requirements.

3. Documentation

• Produce precise and comprehensive documentation for network designs, segmentation policies, standard operating procedures, and incident reports.

4. Training & Support

• Provide guidance, training, and knowledge transfer to team members or end-users about network segmentation best practices and security policies.

5. Stakeholder Engagement

• Participate in meetings, risk assessments, and project planning sessions with various stakeholders, ensuring alignment on segmentation goals and constraints.