Cisco Network Engineer

Network Engineer – Cisco Secure Workload (Network Segmentation) Project

Job Summary:

Responsible for designing, implementing, and supporting network segmentation and micro-segmentation initiatives using Cisco Secure Workload (formerly Tetration) across data center and cloud environments. The role focuses on improving security posture, reducing lateral movement risk, and supporting Zero Trust architecture through policy-driven segmentation.

Key Responsibilities

• Deploy and support Cisco Secure Workload infrastructure and associated components.
• Discover and map application dependencies and traffic flows across data center environments.
• Design and implement macro-segmentation and micro-segmentation policies.
• Create, test, and enforce segmentation policies based on business and security requirements.
• Analyze network traffic patterns and application communications to develop security baselines.
• Coordinate segmentation activities with network, server, security, cloud, and application teams.
• Support policy validation, migration activities, and production cutovers.
• Troubleshoot connectivity issues resulting from segmentation policy enforcement.
• Develop implementation plans, test procedures, rollback plans, and operational documentation.
• Participate in security audits, compliance assessments, and change management processes.

Required Skills

• Hands-on experience with Cisco Secure Workload (Tetration) or network segmentation technologies.
• Strong understanding of TCP/IP, routing, switching, DNS, and application connectivity.
• Knowledge of data center networking, virtualization, and cloud environments.
• Experience with security zoning, micro-segmentation, and Zero Trust principles.
• Understanding of firewall policies, ACLs, and security controls.
• Ability to perform traffic flow analysis and application dependency mapping.
• Strong troubleshooting and analytical skills.
• Experience with change management and implementation activities.

Preferred Skills

• Palo Alto Firewall policy management.
• Cisco Nexus and Catalyst platforms.
• VMware virtualization environments.
• Public cloud networking (AWS/Azure).
• Automation and scripting (Python, Ansible).
• Regulatory compliance knowledge (DORA, PCI-DSS, SOX).

Success Measures

• Successful deployment of segmentation policies with minimal business disruption.
• Reduced attack surface and lateral movement risk.
• Accurate application dependency mapping and policy enforcement.
• Improved compliance and security posture.
• Timely execution of migration and segmentation project milestones.
• Effective collaboration across infrastructure, security, and application teams.