Own the day-to-day engineering, configuration, and optimization of ZTNA and microsegmentation across environments.
Design and implement microsegmentation policies that enforce least‑privilege network access across data center, cloud, and hybrid workloads.
Drive enterprise‑wide ZTNA adoption, partnering with infrastructure, application, and DevOps teams to onboard users and services.
Build and maintain segmentation maps, traffic flow baselines, and policy rule sets aligned to business‑critical applications and regulatory boundaries.
Support and troubleshoot network access issues related to ZTNA policy enforcement, split tunneling, and identity‑aware access controls.
Learn to design, build, and manage AI agents (using platforms such as Kindo.ai, n8n, and Claude/Anthropic APIs) that automate routine network security operations including policy reviews, firewall rule audits, segmentation gap analysis, and anomaly triage.
Build AI‑assisted runbooks that enable autonomous or semi‑autonomous handling of common network security events, escalating only when human judgment is required.
Instrument and monitor AI agent performance, accuracy, and safety using human feedback loops and governance frameworks established by the CISO organization.
Qualifications
7+ years of progressive experience in network security engineering, with hands‑on work in firewall management, network segmentation, VPN/ZTNA, and intrusion detection/prevention.
Demonstrated experience with micro segmentation platforms and ZTNA.
Strong working knowledge of TCP/IP, DNS, routing/switching, proxy architectures, and cloud networking.
Familiarity or strong willingness to learn AI/ML concepts, prompt engineering, and agentic automation frameworks.
Excellent communication skills with the ability to translate complex technical concepts for both technical and executive audiences.
Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience).