Key Responsibilities: Firewall and ACL Governance:
Audit & Rationalization: Systematically review and audit existing firewall rule sets and Access Control Lists (ACLs) across the global enterprise to eliminate redundant, outdated, or overly permissive entries.
Policy Management: Assist in developing and enforcing standardized management procedures for all firewall and ACL modifications, ensuring every change aligns with established security policies and compliance frameworks.
Network Segmentation & Isolation:
Architectural Review: Evaluate and enhance network segmentation strategies—including micro-segmentation—to minimize the attack surface and prevent lateral movement by malicious actors.
Trust Zone Enforcement: Design and implement new VLANs and routing policies to ensure rigorous logical separation between diverse trust zones, including Student, Faculty, Research, IoT, and Administrative networks.
Legacy Infrastructure Decommissioning:
Cleanup Operations: Identify and execute the orderly decommissioning of legacy network segments, unused VLANs, and obsolete hardware configurations.
Infrastructure Migration: Lead the remediation and consolidation of specialized networks, specifically focusing on the phase-out and migration of the OpNet infrastructure to modern, standardized platforms.
Documentation & Compliance:
Topology Management: Maintain accurate, high-fidelity network topology diagrams and documentation for all security-related changes and segmentation schemes.
Regulatory Alignment: Validate that all network cleanup and security activities adhere strictly to internal GOIS (Global Office of Information Security) mandates and external regulatory standards.
