Develop network segmentation strategies using ISA/IEC 62443 zones and conduits models. Engineer resilient ring and fault-tolerant network topologies across substations and OT environments. Develop SD ...
Develop network segmentation strategies using ISA/IEC 62443 zones and conduits models. Engineer resilient ring and fault-tolerant network topologies across substations and OT environments. Develop SD ...
Be Seen First
Network Manager
Sterling, VA · On-site
$100K - $130K/yr
Design and oversee BAS/OT network architecture including VLAN segmentation, routing, redundancy, and failover strategies * Develop network topologies for integration of HVAC, power monitoring ...
Quick apply
Be Seen First
Network Manager
Sterling, VA · On-site
$100K - $130K/yr
Design and oversee BAS/OT network architecture including VLAN segmentation, routing, redundancy, and failover strategies * Develop network topologies for integration of HVAC, power monitoring ...
Senior OT Network Architect
Manassas, VA · On-site
Design and deploy segmented, SD-WAN-enabled OT environments aligned with ISA/IEC 62443 and NERC CIP ... Key Responsibilities Architect OT network segmentation using ISA/IEC 62443 zones/conduits model to ...
Senior OT Network Architect
Manassas, VA · On-site
Design and deploy segmented, SD-WAN-enabled OT environments aligned with ISA/IEC 62443 and NERC CIP ... Key Responsibilities Architect OT network segmentation using ISA/IEC 62443 zones/conduits model to ...
This role advances TSA's network segmentation posture, TIC 3.0 compliance, and ZTNA adoption by providing senior-level advisory on network architecture design, micro-segmentation strategy, and ...
This role advances TSA's network segmentation posture, TIC 3.0 compliance, and ZTNA adoption by providing senior-level advisory on network architecture design, micro-segmentation strategy, and ...
This role advances TSA's network segmentation posture, TIC 3.0 compliance, and ZTNA adoption by providing senior-level advisory on network architecture design, micro-segmentation strategy, and ...
This role advances TSA's network segmentation posture, TIC 3.0 compliance, and ZTNA adoption by providing senior-level advisory on network architecture design, micro-segmentation strategy, and ...
This role advances TSA's network segmentation posture, TIC 3.0 compliance, and ZTNA adoption by providing senior-level advisory on network architecture design, micro-segmentation strategy, and ...
This role advances TSA's network segmentation posture, TIC 3.0 compliance, and ZTNA adoption by providing senior-level advisory on network architecture design, micro-segmentation strategy, and ...
Network Engineer
Herndon, VA · On-site
Harden network infrastructure and enforce security controls including next-generation firewalls, VPNs, ACLs, network segmentation, and Zero Trust principles; serve as a collaborative partner to ...
Network Engineer
Herndon, VA · On-site
Harden network infrastructure and enforce security controls including next-generation firewalls, VPNs, ACLs, network segmentation, and Zero Trust principles; serve as a collaborative partner to ...
Senior Aruba Network Engineer
Vienna, VA · On-site
$104.40K - $143K/yr
Senior Aruba Network Engineer Location: McLean, VA (On-site) Type: Full-time Role Summary KNZ ... Dynamic segmentation * Certificate-based authentication * Integrate ClearPass with: * Active ...
Quick apply
Senior Aruba Network Engineer
Vienna, VA · On-site
$104.40K - $143K/yr
Senior Aruba Network Engineer Location: McLean, VA (On-site) Type: Full-time Role Summary KNZ ... Dynamic segmentation * Certificate-based authentication * Integrate ClearPass with: * Active ...
Senior Aruba Network Engineer
$106.70K - $146.20K/yr
Senior Aruba Network Engineer Location: McLean, VA (On-site) Type: Full-time Role Summary KNZ ... Dynamic segmentation * Certificate-based authentication * Integrate ClearPass with: * Active ...
Senior Aruba Network Engineer
$106.70K - $146.20K/yr
Senior Aruba Network Engineer Location: McLean, VA (On-site) Type: Full-time Role Summary KNZ ... Dynamic segmentation * Certificate-based authentication * Integrate ClearPass with: * Active ...
Senior Aruba Network Engineer
Mclean, VA · On-site
$105.10K - $144K/yr
Senior Aruba Network Engineer Location: McLean, VA (On-site) Type: Full-time Role Summary KNZ ... Dynamic segmentation * Certificate-based authentication * Integrate ClearPass with: * Active ...
Senior Aruba Network Engineer
Mclean, VA · On-site
$105.10K - $144K/yr
Senior Aruba Network Engineer Location: McLean, VA (On-site) Type: Full-time Role Summary KNZ ... Dynamic segmentation * Certificate-based authentication * Integrate ClearPass with: * Active ...
Harden network infrastructure and enforce security controls including next-generation firewalls, VPNs, ACLs, network segmentation, and Zero Trust principles; serve as a collaborative partner to ...
Harden network infrastructure and enforce security controls including next-generation firewalls, VPNs, ACLs, network segmentation, and Zero Trust principles; serve as a collaborative partner to ...
Enforce security controls including next-generation firewalls, VPNs (IPsec/SSL), ACLs, network segmentation, and Zero Trust architecture; collaborate closely with Cybersecurity teams on policy and ...
Enforce security controls including next-generation firewalls, VPNs (IPsec/SSL), ACLs, network segmentation, and Zero Trust architecture; collaborate closely with Cybersecurity teams on policy and ...
Network Engineer
Richmond, VA · Hybrid
... Network segmentation Required 2 Years Firewall rule management Required 3 Years Secure remote connectivity Required 3 Years Access control concepts Required 2 Years Vulnerability remediation support ...
Network Engineer
Richmond, VA · Hybrid
... Network segmentation Required 2 Years Firewall rule management Required 3 Years Secure remote connectivity Required 3 Years Access control concepts Required 2 Years Vulnerability remediation support ...
Network Engineer
Richmond, VA · On-site
Configure and maintain firewalls, VPN solutions, network segmentation, and secure remote access. * Operations & Monitoring: Monitor network health, troubleshoot circuit/connectivity issues, conduct ...
Network Engineer
Richmond, VA · On-site
Configure and maintain firewalls, VPN solutions, network segmentation, and secure remote access. * Operations & Monitoring: Monitor network health, troubleshoot circuit/connectivity issues, conduct ...
... segmentation • Monitor network health, utilization, resiliency, and performance • Troubleshoot connectivity issues, outages, and infrastructure incidents • Perform root cause analysis and ...
... segmentation • Monitor network health, utilization, resiliency, and performance • Troubleshoot connectivity issues, outages, and infrastructure incidents • Perform root cause analysis and ...
MS Azure IaaS/Defender
Richmond, VA · On-site
Proven experience implementing and managing network segmentation within Azure, including VNets, Subnets, NSGs, ASGs, and other Azure networking components. * Hands-on experience with Microsoft ...
MS Azure IaaS/Defender
Richmond, VA · On-site
Proven experience implementing and managing network segmentation within Azure, including VNets, Subnets, NSGs, ASGs, and other Azure networking components. * Hands-on experience with Microsoft ...
Network Architect
Chesapeake, VA · On-site
$63 - $84.25/hr
Network segmentation and zero-trust architecture Technology Leadership * Evaluate, select, and standardize networking technologies and vendors * Drive adoption of: * Infrastructure-as-Code (IaC) and ...
Network Architect
Chesapeake, VA · On-site
$63 - $84.25/hr
Network segmentation and zero-trust architecture Technology Leadership * Evaluate, select, and standardize networking technologies and vendors * Drive adoption of: * Infrastructure-as-Code (IaC) and ...
Network Architect
Chesapeake, VA · Hybrid
$63 - $84.25/hr
Network segmentation and zero-trust architecture Technology Leadership * Evaluate, select, and standardize networking technologies and vendors * Drive adoption of: * Infrastructure-as-Code (IaC) and ...
Network Architect
Chesapeake, VA · Hybrid
$63 - $84.25/hr
Network segmentation and zero-trust architecture Technology Leadership * Evaluate, select, and standardize networking technologies and vendors * Drive adoption of: * Infrastructure-as-Code (IaC) and ...
Design and implement a segmented OT network architecture transitioning from flat Layer 2 networks to SD-WAN-enabled, zone-based architectures. * Define network segmentation strategy (ISA/IEC 62443 ...
Design and implement a segmented OT network architecture transitioning from flat Layer 2 networks to SD-WAN-enabled, zone-based architectures. * Define network segmentation strategy (ISA/IEC 62443 ...
OT Network Architect
$64.75 - $86.75/hr
Define network segmentation strategy (ISA/IEC 62443 zones and conduits model) to isolate critical OT assets and control east-west traffic. Engineer ring and/or resilient topologies across substations ...
OT Network Architect
$64.75 - $86.75/hr
Define network segmentation strategy (ISA/IEC 62443 zones and conduits model) to isolate critical OT assets and control east-west traffic. Engineer ring and/or resilient topologies across substations ...
Network Segmentation information
What are the key skills and qualifications needed to thrive in a Network Segmentation role, and why are they important?
To thrive in a Network Segmentation role, you need a solid understanding of networking concepts, security best practices, and experience with firewalls and VLAN configuration, often supported by certifications like CCNA or CISSP. Familiarity with tools such as network monitoring systems, segmentation platforms, and security information and event management (SIEM) solutions is typically required. Strong analytical thinking, attention to detail, and effective communication are essential soft skills for collaborating with IT teams and identifying security gaps. These skills ensure that network environments are properly segmented to minimize security risks and maintain organizational compliance.
What are some common challenges faced by professionals working in network segmentation roles, and how can they be addressed?
Professionals in network segmentation roles often encounter challenges such as effectively balancing security with business operations, managing legacy systems, and ensuring seamless communication between segmented zones. Addressing these challenges typically involves working closely with IT and business units to understand critical workflows, implementing robust access controls and monitoring, and regularly updating segmentation policies to adapt to organizational changes. Staying current with industry best practices and leveraging automation tools can also help streamline the process and minimize human error.
What is network segmentation?
Network segmentation is the practice of dividing a computer network into smaller, isolated subnetworks to improve security and performance. By separating systems and data, organizations can limit the spread of cyber threats and control user access to sensitive information. This approach helps contain breaches, simplifies compliance, and enhances the efficiency of network management. Common techniques include using VLANs, firewalls, and access control lists to enforce boundaries between segments.
What is the difference between Network Segmentation vs Network Security Engineer?
| Aspect | Network Segmentation | Network Security Engineer |
|---|---|---|
| Primary Focus | Dividing a network into segments to control traffic | Designing, implementing, and managing security measures |
| Required Skills | Networking protocols, VLANs, firewalls | Firewall configuration, intrusion detection, security policies |
| Work Environment | Network infrastructure, data centers, enterprise networks | Security teams, IT departments, cybersecurity environments |
| Certifications | CCNA, CompTIA Network+ | CISSP, CEH, CompTIA Security+ |
Network segmentation involves dividing a network into smaller parts to improve performance and security, while a Network Security Engineer focuses on protecting the network through security measures. Both roles require networking knowledge, but their primary objectives differ: segmentation manages network structure, whereas security engineers safeguard it from threats.
What are popular job titles related to Network Segmentation jobs in Virginia? For Network Segmentation jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Network Segmentation jobs in Virginia look for? The top searched job categories for Network Segmentation jobs in Virginia are:
What cities in Virginia are hiring for Network Segmentation jobs? Cities in Virginia with the most Network Segmentation job openings:
Other
Posted 4 days ago
Job description
Senior OT Network Architect Location: Manassas, VA (Onsite 100%) Employment Type: Contract-to-Hire Job Summary We are seeking an experienced Senior OT Network Architect to lead the design, implementation, and modernization of Operational Technology (OT) network infrastructure in a mission-critical industrial environment. The ideal candidate will possess deep expertise in OT networking, SD-WAN architecture, cybersecurity, network segmentation, and industrial communication protocols within ICS/SCADA environments. This role requires hands-on experience designing resilient, secure, and highly available OT network architectures while supporting IT/OT convergence initiatives and compliance standards such as NERC CIP.
Key Responsibilities Architecture & Design Design and implement segmented OT network architectures transitioning from flat Layer 2 environments to SD-WAN-enabled, zone-based architectures. Develop network segmentation strategies using ISA/IEC 62443 zones and conduits models. Engineer resilient ring and fault-tolerant network topologies across substations and OT environments.
Develop SD-WAN standards including: Underlay and overlay architecture Path selection policies based on latency, jitter, and packet loss QoS optimization for ICS protocols such as DNP3, Modbus, and IEC 61850 Security & Compliance Implement OT-specific cybersecurity controls including: Micro-segmentation Firewall zoning Least-privilege access Define and maintain firewall policies to restrict unauthorized inter-zone communication. Conduct OT-focused risk and vulnerability assessments related to ransomware, lateral movement, and supply chain threats. Ensure compliance with NERC CIP and other applicable cybersecurity frameworks.
Implementation & Operations Lead deployment and integration of SD-WAN solutions across OT sites. Configure and support high-availability and failover mechanisms including: Active/active and active/standby redundancy Rapid Spanning Tree ERPS MPLS-TP Troubleshoot OT network incidents and perform root cause analysis. Manage network implementation projects and provide regular status updates to leadership.
Required Qualifications 10+ years of experience in network architecture and design, preferably within OT, ICS, or SCADA environments. Strong expertise in: SD-WAN technologies Routing and switching Firewall configurations Network segmentation Hands-on experience with industrial protocols including: Modbus DNP3 OPC Ethernet/IP IEC 61850 Strong understanding of IT/OT convergence principles. Experience with industrial-grade switching infrastructure and network resiliency technologies.
Excellent troubleshooting and analytical skills. Preferred Qualifications Experience with ICS and SCADA systems. Knowledge of OT cybersecurity best practices.
Familiarity with network monitoring and management tools. Experience with Cisco networking environments and Extreme Networks switches. Certifications CCNA or CCNP required CCIE preferred Security certifications are a plus Thanks & Regards Vineeth Damarla AVP - BDM| Delivery Manager Vineeth@censusinfotech.com