Network Security

We are seeking an experienced L2/L3 Support Engineer specializing in Micro-Segmentation to join our Network Security team in Chennai. This role is crucial for designing, implementing, and supporting advanced network segmentation strategies to bolster enterprise security. You will leverage your expertise in traffic flow analysis, Zero Trust Architecture, and application dependency mapping, coupled with hands-on experience with leading security tools such as Illumio and Octoflow, and DevSecOps principles.

Key Responsibilities include analyzing network traffic from Layer 2 to Layer 7, performing detailed packet captures and analysis using tools like Wireshark and tcpdump. You will manage ports, protocols, and service communications to ensure secure segmentation, and conduct thorough application dependency mapping in alignment with Zero Trust principles. This role involves deploying and managing Illumio PCE for comprehensive workload visibility, policy creation, and enforcement, as well as utilizing Octoflow for investigation and policy automation. Integration of secrets and certificate management solutions like CyberArk, Vault, and CipherTrust is also a key aspect. You will be responsible for troubleshooting complex segmentation and security issues, contributing to design and architecture discussions, and maintaining documentation for network architectures, segmentation policies, and troubleshooting procedures.

Required Skills include a strong understanding of L2–L7 network traffic flows, ports, and protocols, proficiency in packet analysis (Wireshark, tcpdump), and expertise in Zero Trust Architecture and application dependency mapping. Hands-on experience with Illumio PCE and Octoflow is essential, along with experience in DevSecOps integration using tools such as CyberArk, Vault, and CipherTrust. A solid knowledge of Public Key Infrastructure (PKI) and related tools is also necessary.

Desired skills encompass security automation and orchestration experience, proficiency in cloud/hybrid network segmentation, container security (Kubernetes, Docker), and scripting languages like Python and Bash. Experience with threat modeling and risk-based segmentation is also beneficial.

Preferred certifications include Illumio Certified Engineer, GIAC GSEC / GCSA, Zero Trust Certified Architect (ZTCA), relevant certifications from CyberArk, HashiCorp Vault, or PKI, and foundational networking certifications like Network+, CCNA, or CCNP.

Qualifications include a Bachelor or Master's Degree in Information Technology, Cybersecurity, Engineering, or an equivalent qualification.

This position requires openness to working European shift hours. Sopra Steria is committed to fostering an inclusive and respectful work environment, free from discrimination, and actively welcomes applications from individuals with disabilities.