Position Summary:

We are seeking a Systems Engineer with deep expertise in micro segmentation and network security to lead the design, implementation, and operational lifecycle of security controls in a private cloud environment.

The ideal candidate will drive Day 0 (i.e. tool selection), execute Day 1 implementation of micro segmentation solutions (as a subject matter expert), and oversee Day 2 operations and continuous improvement. Working with a dynamic, forward-thinking team and be a key player in driving our zero-trust journey and cloud security evolution.

He/she has good communication skills, is a competent negotiator, demonstrates resiliency, good at problem solving and can engage & influence effectively both the internal and external stakeholders. He/she is adaptable to change in an agile and volatile environment while taking ownership and deliver works with integrity.

Role and Responsibilities:

• Evaluate, compare, and recommend tool(s) for micro segmentation
• Assess security architecture and develop control strategies for micro segmentation
• Define security policies, control objectives, and segmentation strategy for healthcare application workloads
• Lead the deployment and configuration of micro segmentation platform(s) as a subject matter expert
• Lead the integration of micro segmentation tool with existing infrastructure, including firewalls (i.e. Palo Alto, Cisco, Check Point) and systems' platforms (i.e. Nutanix, VMware)
• Collaborate with network, infrastructure, and application teams to align enforcement points and policy models
• Operate and maintain micro segmentation platform(s) and micro segmentation policies
• Analyse traffic flows, recommend segmentation improvements, and refine policy sets
• Monitor compliance, perform audits, and lead incident response in coordination with cross-functional teams
• Document procedures, runbooks, and training for team members
• Develop plans including schedules, budgets, and resource allocation
• Ensure accurate allocation of resources, providing leadership to cross-functional teams
• Provides regular update to key stakeholders and management, communicate risks, escalate issues for resolution in a timely manner
• Ensure compliance with relevant policies, regulations, and standards
• Analyse and validate design with technical teams
• Conduct impact assessments to understand the effect of transition (i.e., due to new micro segmentation technology) on various parts of the organization

Qualifications/ Requirements:

• Bachelor's degree in Computer Science, Information Technology, Computer Engineering, or equivalent discipline
• Minimum of 8-10 years of experience in security and network engineering roles, with experience in managing an operation team.
• Strong hands-on experience, technical knowledge and troubleshooting skills with micro segmentation tools: such as Cisco Secure Workload, Illumio, Akamai Guardicore, ColorTokens, VMware NSX and Nutanix Flow and so on. Certifications in the above areas would be preferred
• In-depth knowledge of network firewalls - Palo Alto, Cisco, Check Point (deployment, policy management, threat prevention).
• Solid foundation in networking fundamentals - Layer 2/3 switching, routing protocols (BGP, OSPF), VLANs, ACLs.
• Familiar with zero trust security models, least privilege access, and traffic visibility concepts.
• Strong leadership and stakeholder engagement skills
• Ability to translate security requirements into practical implementations
• Ability to lead operation team and manage complex projects
• Ability to work under pressure and meet tight deadlines
• Take initiative and able to work independently
• Meticulous and attentive to details