> Markdown version of [/jobs/ext/1726992-senior-information-security-engineer-firewall-micro-segmentation](https://www.wearedevelopers.com/jobs/ext/1726992-senior-information-security-engineer-firewall-micro-segmentation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Information Security Engineer - Firewall Micro-segmentation

- **Company:** Wells Fargo
- **Location:** San Antonio, TX, United States
- **Experience:** Expert
- **Salary:** $100,000.0 - $196,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, JIRA, Microsoft Azure, Configuration Management Databases, Cyber Security, Continuous Integration, Github, JSON, Python (Programming Language), NetFlow, Network Segmentation, OAuth, OpenID, Windows PowerShell, Ansible, Akamai, Kusto Query Language, Zero Trust Network Access, Security Information and Event Management, Policy as Code, Scripting, Istio, HybridCloud, Firewalls (Computer Science), Amazon Virtual Private Cloud (VPC), Kubernetes, CIS Benchmarks, Terraform, Splunk, Software Version Control, Cisco, Servicenow, Vmware
- **Published:** July 11, 2026
- **Apply:** https://dejobs.org/x/x/47632208D0C446A19D3285517F8F1551/job/

## About the Role

We are looking for a solid security engineer with a technical foundation in firewalls and traffic segmentation.

Ideal candidates would have hands on segmentation experience with Illumio and at least one of: Guardicore (Akamai), VMware NSX-T, Cisco Secure Workload, or Kubernetes-native (Calico/Cilium, NetworkPolicies) including policy simulation/shadow testing and staged rollouts.

Hands-on segmentation in hybrid environments (on-prem + AWS/Azure/GCP), including Azure ASG/NSG or AWS SG patterns, and Kubernetes/Service Mesh (NetworkPolicies, mTLS, Istio/Envoy) for east-west traffic would be highly desirable.

Scripting is a talent of yours and you like the challenge of building reliable automations using Python/PowerShell, Terraform/Ansible, and ServiceNow IntegrationHub with OAuth2/OIDC-secured APIs, version control (Git/GitHub), CI/CD, and policy-as-code workflows (idempotent, retry-safe).

Security is top of mind for you and you are able to implement identity- and risk-aware policies by integrating CMDB labels, workload identities, and EDR/PAM context to enforce Zero Trust segmentation, * 4+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education, * Experience with Micro-Segmentation security solutions including policy management

 * Experience with scripting
 * Strong understanding of APIs and proficiency in working with JSON, including the ability to interpret, construct, and troubleshoot queries and payloads in support of automation and integration efforts
 * Experience with one or more: Guardicore (Akamai), VMware NSX T, Cisco Secure Workload, Calico/Cilium.
 * Experience with Hybrid cloud segmentation in Azure/AWS/GCP (NSG/ASG, SG/NACL, tags/labels).
 * Experience with Service Mesh (Istio/Envoy), Kubernetes NetworkPolicies, OPA/Gatekeeper.
 * Scripting skills such as Python/PowerShell, Terraform/Ansible, Git/GitHub, CI/CD; ServiceNow IntegrationHub.
 * Telemetry (NetFlow/IPFIX/eBPF, VPC Flow Logs) and SIEM analytics (Splunk/Sentinel/Elastic; KQL/SPL).
 * Understanding of NIST 800 207 Zero Trust and mapping to NIST/CIS controls.
 * Experience designing policy simulation/shadow testing and staged rollouts with measurable KPIs.
 * Excellent technical documentation skills
 * Experience with Service Now, Jira or similar systems.

Job Expectations:

 * Willingness and Ability to work off hours and occasional weekends to support change activities
 * Participation in on call shift

Pay Range

Reflected is the base pay range offered for this position. Pay may vary depending on factors including but not limited to demonstrated examples of prior performance, skills, experience, or work location. Employees may also be eligible for incentive opportunities.

## Description

* Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to Micro-Segmentation
 * Implement requirements and engage teams to create automation / orchestration for the enterprise's Micro-Segmentation solution
 * Help identify new tools and/or features to strengthen enterprise Micro-Segmentation capabilities
 * Serve as a POC for enterprise Micro-Segmentation deployment
 * Implement security designs on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
 * Utilize subject matter knowledge in industry leading security solutions and best practices to implement components of information security.
 * Collaborate and provide influence with all members of the microsegmentation team
 * Define and coordinate automation strategies to integrate micro-segmentation with CMDB and user-facing portals, translating business and security requirements into actionable deliverables for development teams.


## Related Videos

- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)

## Related Articles

- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [How Much Does a Software Engineer Make? Realistic Software Engineering Salaries](https://www.wearedevelopers.com/magazine/425-how-much-does-a-software-engineer-make-realistic-software-engineering-salaries)
- [How Much FAANG Companies Actually Pay Software Engineers in 2025](https://www.wearedevelopers.com/magazine/230-how-much-faang-companies-actually-pay-software-engineers-in-2025)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)