Lead Consultant - Network Segmentation & Zero Trust

Qualifications

Experience

• 8-12 years of experience in cybersecurity or enterprise networking with a sustained focus on segmentation and Zero Trust; must include 5+ years in a senior consulting or technical leadership role with hands-on architecture and client advisory experience.

• Demonstrated experience serving as a segmentation or Zero Trust technical SME within pursuit or sales teams, with a track record of contributing to scoping, pricing, and winning consulting engagements.

• Demonstrated experience as the lead author and final owner of client-facing security strategy and assessment documents, including assessment reports, enterprise strategies, execution plans, and executive presentations.

• Deep technical expertise across segmentation domains, including:

• Enterprise and Data Center Segmentation: next-generation firewall zone architecture; fabric-layer and overlay-based segmentation, including VXLAN/EVPN and VRF design; and east-west enforcement strategy

• Host-Based Microsegmentation: agent-based workload segmentation platforms, including policy model design, ringfencing strategy, dependency-driven policy authoring, and phased enforcement rollout

• Identity- and Access-Driven Segmentation: network access control, dynamic authorization, device trust posture, and zero trust network access

• Cloud Segmentation: cloud provider network constructs, security groups and network security groups, transit and hub-and-spoke architectures, cloud-native policy, and container and service-mesh segmentation

• OT/ICS, IoT, and IoMT Segmentation: Purdue model and IEC 62443 zone-and-conduit design; passive asset visibility and risk platforms; and the brownfield constraints that limit enforcement options

• Discovery and Dependency Mapping: flow collection and analysis, application dependency mapping, and translating observed traffic and dependencies into segmentation policy and zone design

• Working knowledge of Zero Trust architecture and maturity models: NIST SP 800-207, the CISA Zero Trust Maturity Model (ZTMM), the DoD Zero Trust Reference Architecture, and protect-surface methodology.

• Working knowledge of the frameworks and regulatory drivers that shape segmentation: NIST CSF 2.0, NIST SP 800-53 (SC and AC control families), NIST SP 800-171/172, PCI DSS v4 segmentation and scoping, HIPAA Security Rule, ISA/IEC 62443, NERC CIP, and FFIEC/GLBA.

• Practical understanding of the adjacent domains that determine whether a segmentation plan is executable: identity and access management, endpoint and device trust, asset management and CMDB hygiene, change management and operational readiness, and the shared platform foundations segmentation depends on.

• Preferred: experience leading segmentation programs across financial services, healthcare, manufacturing, retail, energy, or public sector, particularly where segmentation intersects with regulatory scrutiny (HIPAA, PCI DSS, NERC CIP, DORA); and experience with OT/ICS, IoT, and IoMT environments and the operational constraints that shape segmentation in those environments.

• Preferred: contributions to segmentation or Zero Trust thought leadership through white papers, conference presentations, or intellectual property; and experience with adjacent drivers of segmentation work, including M&A network integration, data center or cloud migration, PCI scope reduction, and post-incident segmentation remediation.

• Certifications desired: CISSP, CISSP-ISSAP, CISM, CRISC, or CCSP; ISA/IEC 62443 is a plus for OT-adjacent work.

Specialized Knowledge, Skills & Abilities

Working knowledge and consulting experience in at least five of the following areas:

• Enterprise Segmentation and associated technologies
• Zero Trust Architectures including ZTMM (Zero Trust Maturity Model)
• Network and Systems Security
• Cloud Security and Cloud Network Architecture
• Operational Technologies and Environments (OT/ICS, IoT, IoMT)
• Risk Management and Assessments
• Policy, Governance, and Compliance
• Identity and Access Management
• Data Protection and Privacy
• Security Operations

Demonstrated consulting delivery competencies, including:

• Structured discovery and assessment: design and execute current-state discovery across corporate/campus, data center, cloud, and OT/IoT environments; run stakeholder interviews and technical SME sessions; and synthesize findings into clearly structured, actionable outputs.
• Gap analysis and maturity evaluation: assess and communicate segmentation maturity across technology, process, governance, and organizational readiness dimensions against recognized frameworks; prioritize findings by business and security risk.
• Executive communication: translate complex segmentation findings into clear, concise narratives for CISO and senior leadership audiences; adapt message depth and framing to technical and business stakeholders.
• Workshop facilitation: design and lead executive workshops, program kickoffs, cross-functional discovery sessions, and technical design sessions; drive alignment among stakeholders with competing priorities.
• Roadmap and program planning: develop phased segmentation roadmaps with initiative prioritization, dependency mapping, ROM estimates, and milestone sequencing aligned to client business constraints and risk objectives.
• Deliverable excellence: consistent track record of producing client-ready segmentation deliverables, including assessments, gap and risk registers, enterprise strategies, executable plans, and executive readouts, that meet professional services quality standards.
• Stakeholder and engagement management: manage complex, multi-stakeholder engagements; navigate competing priorities, set and manage expectations, escalate risks appropriately, and sustain client trust through ambiguity.
• Practice development: develop, maintain, and enhance segmentation service offerings, including methodologies, marketing content, deliverable templates, and practice capabilities.
• Sales and pipeline management: identify, shape, and drive segmentation opportunities from initial discussions through proposals, SOW, fee estimation, level of effort, margins, leveraged team structures, and deal closure.

Professional Attributes

• Professional writing is required: strong, demonstrable ability to produce and approve technical and business-related artifacts at a client-deliverable standard.
• Able to manage concurrent engagements and workstreams in complex environments under shifting priorities and timelines.
• Able to communicate and modify approach, language, and style across audiences, from technical SMEs to CISO, VP, and CxO-level stakeholders.
• Collaborative, with the ability to manage conflicting interests across client stakeholders, technology partners, and internal teams, and to operate effectively amid ambiguity.
• Commercially aware, with sound judgment on scope, effort, margin, and staffing.
• Self-directed and proactive, with strong problem-solving instincts and intellectual curiosity about evolving technology.

Professional Behaviors

Beyond technical delivery, this role is expected to demonstrate the following in front of clients and within the WWT team:

• Ownership and accountability: take responsibility for engagement outcomes and for the quality of every deliverable released under your approval, and follow through on commitments without being chased.
• Trusted advisor: build credibility quickly at both the working and executive levels, give candid and well-reasoned recommendations, and represent WWT as a partner the client relies on rather than an order-taker.
• Clear communication: translate technical complexity into plain language for the audience at hand, listen actively, and keep stakeholders informed without surprises.
• Developing others: treat mentoring as part of the role rather than an addition to it, and hold junior consultants to the standard applied to your own work.
• Integrity: give honest assessments even when the message is hard, and protect the client's interests and WWT's reputation in every recommendation.

Want to learn more about Consulting & Security Services? Check us out on our platform:

https://www.wwt.com/consulting-services

https://www.wwt.com/category/security-transformation

Certain states and localities require employers to post a reasonable estimate of salary range. A reasonable estimate of the current base pay range for this position is $137,200 to $171,500 annually. Actual salary will be based on a variety of factors, including shift, location, experience, skill set, performance, licensure and certification, and business needs. The range for this position in other geographic locations may differ. Certain positions may also be eligible for variable incentive compensation, such as bonuses or commissions, that is not included in the base pay.

The well-being of WWT employees is essential. When it comes to our benefits package, WWT has one of the best. We offer the following benefits to all full-time employees:

• Health and Wellbeing: Health (Medical & Prescription), Dental, and Vision Care, Onsite Health Centers (MO & IL), Employee Assistance Program, Wellness program
• Financial Benefits: Competitive Pay, Profit Sharing, 401k Plan with Company Matching, Life and Disability Insurance, Flexible Spending Accounts, Tuition Reimbursement
• Paid Time Off: PTO & Holidays, Parental Leave, Medical Leave, Military Leave, Bereavement, Day of Caring
• Additional Perks: Family Planning Benefits, Nursing Mothers Benefits, Voluntary Legal, Voluntary Supplemental Accident/Illness/Hospital, Voluntary ID Theft, Pet Insurance, Employee Discount Program

Note: This is not an all-encompassing list and should not be used as a complete description of the plan's benefits. For more information, see our US benefits website at wwt.com/us-benefits.

We strive to create an environment where all employees are empowered to succeed based on their skills, performance, and dedication. Our goal is to cultivate a culture of belonging that encourages innovation, collaboration, and respect for all team members, ensuring that WWT

remains a great place to work for all!

If you require accessibility accommodation(s) or adjustment during any stage of the hiring process, please let your WWT Recruiter know. The recruiter will work with you to understand your needs and help ensure an accessible experience throughout the interview process.

World Wide Technology is an Equal Opportunity Employer.

If you have any questions or concerns about this posting, please email taposting@wwt.com.

#LI-TB1