Execute assigned delivery tasks and workstream components within Segmentation and Zero Trust engagements with accountability for quality, accuracy, and on-time completion
Lead technical components of segmentation assessments: conduct current-state discovery, perform network and application dependency analysis, document findings, and score maturity against defined frameworks with guidance from the engagement lead
Deliver WWT’s Segmentation Accelerator and Zero Trust Maturity Evaluation services: protect-surface definitions, zone and trThe Senior Consultant — Segmentation & Zero Trust is a technically strong individual contributor who owns defined delivery tasks and workstream components within WWT’s network segmentation and Zero Trust practice. Positioned below the Lead Consultant, the Senior Consultant brings hands-on depth across segmentation and Zero Trust domains, executes high-quality client deliverables with growing independence, and begins developing trusted client relationships at the working level.
The Senior Consultant is the engine of segmentation delivery — leading current-state discovery and dependency mapping, defining protect surfaces, zones, and trust boundaries, authoring segmentation strategy and execution plans, and producing the analytical outputs that underpin client recommendations. They work under the direction of a Lead Consultant, Principal or Senior Manager, and are expected to grow steadily toward owning full workstreams and contributing to pre-sales activities.
ust-boundary design, segmentation policy, and rationalization of segmentation- or Zero Trust-enabling technology already owned by the client
Produce client-ready deliverables — discovery summaries, gap and risk assessments, segmentation strategy, executable segmentation plans, maturity scorecards, architecture diagrams, and executive findings — that meet client''s professional services quality standards
Facilitate discovery sessions, stakeholder interviews, and working-level workshops; synthesize findings into structured outputs for Lead Consultant review
Support segmentation strategy and design activities: document current-state architecture, identify gaps and risks, define future-state zones and trust boundaries, and contribute to phased, executable roadmap recommendations under direction of the Lead Consultant or Senior Manager
4–8 years of experience in cybersecurity or enterprise IT with a clear focus on network segmentation and Zero Trust; must include hands-on experience with at least two segmentation domains (network/fabric segmentation, host-based microsegmentation, identity-based segmentation, or Zero Trust network access)
Understanding of core segmentation and Zero Trust concepts: protect surfaces, zones and trust boundaries, least privilege, deny-by-default, east-west vs. north-south traffic, lateral-movement containment, blast-radius reduction, application dependency mapping, and visibility-before-enforcement sequencing
Working knowledge of segmentation and security frameworks: NIST SP 800-207 (Zero Trust), CISA Zero Trust Maturity Model (ZTMM), NIST CSF 2.0, NIST SP 800-53, ISO 27001/27002, PCI-DSS v4 segmentation requirements, HIPAA Security Rule, and ISA/IEC 62443 for OT environments
Hands-on experience across segmentation domains and platforms, including one or more of:
Network & Fabric Segmentation — Cisco (ACI, SD-Access/ISE, TrustSec/SGT), Arista (EVPN/VXLAN), Elisity, or equivalent: VRF and VLAN design, fabric-layer enforcement, and macro-segmentation between zones
Host-Based Microsegmentation — Illumio, Akamai Guardicore, VMware NSX, or Cisco Secure Workload: agent deployment, traffic visibility and dependency mapping, allow-list policy design, and ringfencing of application boundaries
Firewall & Perimeter Enforcement — Palo Alto, Fortinet, Cisco, or Check Point: security zone and policy design, north-south and inter-VRF enforcement, rule rationalization, and east-west control where applicable
Identity-Based Segmentation & ZTNA — Zscaler (ZPA), Cisco ISE, or equivalent: identity-driven access control, user-to-application segmentation, NAC integration, and Zero Trust network access design
Asset Visibility & Discovery — flow collection and dependency mapping, CMDB (e.g., ServiceNow), and OT/IoT/IoMT visibility and risk platforms: building the asset inventory and observed-traffic baseline that segmentation policy depends on
Structured discovery: ability to conduct current-state discovery interviews, gather documentation and evidence, manage information collection across workstreams, and synthesize findings into clear, structured outputs
Gap analysis: experience assessing segmentation program maturity against frameworks, documenting gaps, and prioritizing findings by risk and business impact
Technical communication: ability to translate segmentation findings and recommendations into clear written deliverables and verbal summaries for technical and working-level client audiences
Workshop facilitation: participate in and contribute to discovery sessions, technical design sessions, and working-group meetings; begin developing the ability to facilitate independently
Deliverable quality: consistent track record of producing accurate, well-structured client deliverables — assessment reports, gap and risk registers, segmentation plans, and architecture diagrams — on time and to standard
Engagement collaboration: work effectively within project teams; communicate status, risks, and issues proactively to the engagement lead; adapt to shifting priorities and client needs
Bachelor’s degree in Computer Science, Information Security, Networking, or a related field
Industry certifications demonstrating segmentation, network, or security knowledge: CISSP, ISSAP, CISM, CCZT, or equivalent; vendor certifications from Cisco (CCNP Security), Palo Alto (PCNSE), Fortinet (NSE), Illumio, or Zscaler are a strong plus
Experience in enterprise environments across financial services, healthcare, retail, manufacturing, or public sector — particularly where segmentation intersects with regulatory compliance (HIPAA, PCI-DSS, FedRAMP)
Prior consulting experience at a professional services firm, systems integrator, or equivalent client-facing advisory role
Familiarity with pre-sales processes: SOW development, effort estimation, or proposal support
Never miss an opportunity! Create an alert based on the job you applied for.