Network Engineer

ITC Infotech; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

ITC Infotech in Hyderabad seeks a Network Segmentation Engineer to design, implement, and maintain secure segmentation strategies that reduce the attack surface and safeguard data. You will partner with network, cybersecurity, and compliance teams to ensure segmentation supports security and operations.

Responsibilities include documenting segmentation policies, assisting with change management, and delivering clear guidance to stakeholders while maintaining alignment with regulatory

Qualifications

• Experience designing secure network segmentation strategies and policies.
• Ability to model threats and map segmentation to business processes.
• Strong documentation and change-management skills.

Responsibilities

• Design and implement segmentation strategies across networks to minimize attack surface.
• Collaborate with security, network, and compliance teams to align segmentation with requirements.
• Document segmentation policies and diagrams, and support change management.

Skills

Analytical thinking

Documentation & compliance

Project management

Incident response & troubleshooting

Clear technical communication

Collaboration

Tools

Wireshark

Ansible

Python

NetFlow

Grafana

Prometheus

SNMP

IPtables

Palo Alto

Illumio

Job description

Job Description:

• The Network Segmentation Engineer is responsible for designing, implementing, and maintaining secure network segmentation strategies to reduce the attack surface, enhance data protection, and support compliance with cybersecurity standards.
• This role involves close collaboration with network engineering, cybersecurity, compliance, and business units to ensure segmentation supports both security and operational requirements.

Technical Skills

1. Networking Knowledge

• Very strong understanding of TCP/IP stack
• Deep understanding of common network ports and protocols: TCP/UDP ports, HTTP/S, FTP, DNS, DHCP, SMTP, SNMP, ICMP, SSH, RDP, SMB, SIP, and more.
• Familiarity with Layer 2 and Layer 3 segmentation (e.g., VLANs, subnets)

2. Security Expertise

• Knowledge of firewall/access technologies (e.g., Palo Alto, Juniper, ACLs on both Cisco and Juniper)
• Experience with Zero Trust architecture and microsegmentation (e.g., Illumio, Guardicore)
• Experience with host based firewalling (e.g., Windows Defender, IPtables)

3. Tools & Platforms

• Network tracing tools (e.g., Wireshark)
• Configuration management tools (e.g., Ansible, Python)
• Network monitoring tools (e.g., NetFlow, FlowMon, SNMP, Grafana, Prometheus)

Soft Skills & Responsibilities

1. Analytical Thinking

• Ability to assess network traffic flows and segment based on application or sensitivity
• Threat modeling and attack surface analysis

2. Documentation & Compliance

• Strong documentation skills for network diagrams, segmentation policies, and change management

3. Project Management

• Support segmentation projects from planning through execution
• Strong communication skills
• Collaborate with different stake holders like security, application owners, application managers and end-users

4. Incident Response & Troubleshooting

• Troubleshoot issues related to misconfigured segments or access
• Participate in incident response related to lateral movement or segmentation failures

Communication Skills

1. Clear Technical Communication

• Ability to explain complex network segmentation concepts and security implications clearly to both technical and non-technical stakeholders, including management, auditors, and cross-functional teams.

2. Collaboration

• Work closely with network engineers, security teams, application owners, and compliance officers to design and implement segmentation strategies that meet business and security requirements.

3. Documentation

• Produce precise and comprehensive documentation for network designs, segmentation policies, standard operating procedures, and incident reports.

4. Training & Support

• Provide guidance, training, and knowledge transfer to team members or end-users about network segmentation best practices and security policies.

5. Stakeholder Engagement

• Participate in meetings, risk assessments, and project planning sessions with various stakeholders, ensuring alignment on segmentation goals and constraints.