Network Security - Micro Segmentation

About Sopra Steria
Sopra Steria, a major Tech player in Europe with 50,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2024, the Group generated revenues of €5.8 billion.
The world is how we shape it.

Role Title: L2/L3 Support Engineer – Micro-Segmentation (Network Security & Segmentation)

Location: Chennai

Experience: 6-12 years

Role Overview
Responsible for designing, implementing, and supporting advanced network segmentation solutions to strengthen enterprise security. The role requires expertise in traffic flow analysis, Zero Trust Architecture, application dependency mapping, and hands-on experience with Illumio, Octoflow, and DevSecOps security tools.

Key Responsibilities

• Analyze L2–L7 traffic flows; perform packet capture/analysis (Wireshark, tcpdump).
• Manage ports, protocols, and service communications for secure segmentation.
• Conduct application dependency mapping and align with Zero Trust principles.
• Deploy and manage Illumio PCE for workload visibility, policy creation, and enforcement.
• Utilize Octoflow for investigation and policy automation.
• Integrate secrets and certificate management (CyberArk, Vault, HSM-CipherTrust, PKI/Forgerock).
• Troubleshoot complex segmentation/security issues; support design & architecture discussions.
• Document network architectures, segmentation policies, and troubleshooting procedures.

Must-Have Skills

• Strong understanding of L2–L7 network traffic flows, ports, and protocols.
• Proficiency in packet analysis (Wireshark, tcpdump).
• Expertise in Zero Trust Architecture & application dependency mapping.
• Hands-on with Illumio PCE and Octoflow.
• Experience with DevSecOps integration (CyberArk, Vault, CipherTrust).
• Solid knowledge of PKI & related tools.

Desired Skills

• Security automation & orchestration experience.
• Cloud/hybrid network segmentation.
• Container security (Kubernetes, Docker).
• Scripting (Python, Bash).
• Threat modeling & risk-based segmentation.

Preferred Certifications

• Illumio Certified Engineer
• GIAC GSEC / GCSA
• Zero Trust Certified Architect (ZTCA)
• CyberArk, HashiCorp Vault, PKI certifications
• Network+ / CCNA / CCNP

Qualification includes Bachelor / Masters Degree in Information Technology, Cybersecurity or Engineering, or equivalent qualification

Should be open to work in European shift hours.

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.

All of our positions are open to people with disabilities.