{"id":3211447,"url":"https://alion.io/job/tekshapers-senior-network-security-engineer-micro-segmentation","title":"Senior Network Security Engineer (Micro segmentation)","company":{"id":4460953,"name":"Tekshapers","domain":"tekshapers.com","url":"https://alion.io/company/tekshapers","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Houston, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":107000,"max_usd":206000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":1306},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Akamai","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"BGP","optional":false},{"name":"DHCP","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"FortiGate","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"ITIL","optional":false},{"name":"Least Privilege","optional":false},{"name":"MPLS","optional":false},{"name":"OSPF","optional":false},{"name":"SIEM","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false}],"status":"closed","first_seen_at":"2026-10-22T21:48:00Z","employer_posted_date":null,"last_verified_at":"2026-10-25T17:16:30Z","board_verified":false,"closed_at":"2026-10-25T17:16:30Z","days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Senior Network Security Engineer (Micro segmentation)\n\r\rLocation: Houston, TX \n\r\rDuration: Long Term \n\r\rKey Responsibilities\n\r\r\rTranslate high-level business strategic objectives and goals into Enterprise IT requirements and conceptual designs.\n\rDevelop and support comprehensive solutions that meet requirements and align with CLIENT’s global network security and microsegmentation strategy.\n\rDevelop and maintain a multi-year strategic network and security architecture roadmap, incorporating Zero Trust and segmentation-driven security models.\n\rLead end-to-end network and security architecture across global platforms ensuring secure, high-performing, fault-tolerant, and resilient environments.\n\r\r\rMicrosegmentation & Zero Trust Responsibilities\n\r\r\rArchitect and implement microsegmentation strategies across data center, campus, and cloud environments to limit lateral movement and enforce least-privilege access.\n\rDesign and operationalize Zero Trust Architecture (ZTA) principles, integrating identity, application, and network-based policy enforcement.\n\rCollaborate with application owners to discover, validate, and map application dependencies to enable policy-driven segmentation.\n\rDefine and enforce granular security policies using label/tag-based segmentation approaches across hybrid environments.\n\rIntegrate microsegmentation with firewalls, SIEM, IAM, EDR/XDR, and cloud-native controls for unified policy enforcement.\n\rLead adoption of microsegmentation platforms (e.g, Guardicore/Akamai Segmentation).\n\rDevelop segmentation governance models, policy lifecycle management, and compliance alignment (CIS/NIST/Zero Trust frameworks).\n\n\r\rCore Network Security Responsibilities\n\r\r\rParticipate in network security design reviews and ensure all implementations meet enterprise security standards.\n\rAnalyze business requirements to design and implement security across data centers, campus networks, and hybrid environments.\n\rProvide ongoing risk metrics, control effectiveness tracking, and security posture reporting.\n\rConduct and support internal and external security audits and compliance assessments.\n\rMaintain awareness of emerging threats and update policies accordingly.\n\rDevelop and manage policies, processes, and procedures ensuring reliability, availability, and security of network systems.\n\rManage and optimize Security Information and Event Management (SIEM) systems.\n\rCollaborate with Cyber Security, infrastructure, and application teams toward compliance and operational excellence.\n\n\r\rTechnical Qualifications\n\r\r\r10+ years of experience in enterprise network security architecture, engineering, and operations.\n\r\r\rMicrosegmentation & Advanced Security\n\r\r\rStrong hands-on experience in designing and implementing microsegmentation solutions in complex enterprise environments.\n\rProven capability to build application-aware segmentation policies based on traffic flow analysis.\n\rExperience with policy simulation, enforcement, monitoring, and optimization in segmentation platforms.\n\rUnderstanding of east-west traffic inspection, workload protection, and software-defined segmentation.\n\rFamiliarity with Zero Trust Network Access (ZTNA) and identity-driven access models.\n\n\r\rNetwork Security & Infrastructure\n\r\r\rStrong experience managing LAN/WAN security technologies, including firewalls, IDS/IPS, SIEM, VPN, and NAC.\n\rExpertise in firewall architecture and design with hands-on experience in: \r\rFortinet (Fortigate), Palo Alto, Juniper\n\rPolicy design, NAT, routing, application control, and threat prevention profiles\n\n\rExperience securing public and private cloud (AWS, Azure, Google Cloud Platform) environments.\n\rDesign and implementation of Web Application and API Protection (WAAP) solutions.\n\rStrong experience in proxy (forward/reverse), load balancing, and application security integration.\n\rExperience with SDN and SD-WAN architectures, including segmentation use cases.\n\n\r\rNetworking & Protocol Expertise\n\r\r\rStrong knowledge of: \r\r\rRouting protocols: BGP, OSPF, RIP, MPLS\n\rNetwork services: DNS, DHCP, NTP\n\rIPv4/IPv6 architecture and traffic management\n\n\rExperience in QoS, NetFlow, ACLs, NAT, multicast, and wireless technologies (802.11 variants).\n\rExperience with F5 GTM/LTM, VPN technologies, and Internet proxy solutions.\n\n\r\rData Center & Infrastructure\n\r\r\rExperience managing enterprise data center environments with technologies including: \r\r\rAruba, Arista, Juniper switching\n\rFirewalls, WAN optimization, IDS/IPS, DLP\n\n\rStrong understanding of structured cabling and network facilities.\n\n\r\rOperations & Lifecycle Management\n\r\r\rPlan, implement, and document infrastructure changes, including upgrades and migrations.\n\rWork within ITIL frameworks for incident, change, and problem management.\n\n\r\rEducation & Certifications\n\r\r\rBachelor’s Degree in Computer Science, Network Engineering, or related field (or equivalent experience).\n\r10+ years of experience in global network security environments.\n\rPreferred certifications: \r\rCCNP / CCIE\n\rJNCIE\n\rSecurity certifications (CISSP, CISM, or equivalent) are a plus\n\n\r\r“Tekshapers is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.”","description_format":"text","description_chars":5337,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Information Technology"],"lifecycle":[{"event":"open","at":"2026-10-24T16:56:55Z"},{"event":"close","at":"2026-10-25T17:16:30Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/tekshapers-senior-network-security-engineer-micro-segmentation","json_url":"https://alion.io/job/tekshapers-senior-network-security-engineer-micro-segmentation.json","meta":{"generated_at":"2026-10-27T19:44:39Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10504,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4460953},"rest":"https://alion.io/mcp/rest/get_company?id=4460953"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftekshapers-senior-network-security-engineer-micro-segmentation"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftekshapers-senior-network-security-engineer-micro-segmentation"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftekshapers-senior-network-security-engineer-micro-segmentation"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tekshapers-senior-network-security-engineer-micro-segmentation\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftekshapers-senior-network-security-engineer-micro-segmentation"}]}