Illumio Zero Trust Segmentation Platform Engineer - Active TS/SCI with CI Poly

Key Responsibilities

• Lead the design, deployment, configuration, and optimization of Illumio Core and Illumio Edge across on-premises, virtualized, and cloud environments.
• Architect and implement Zero Trust Segmentation policies, including application dependency mapping, labeling frameworks, enforcement boundaries, and zone-based controls.
• Develop Illumio workflows, runbooks, dashboards, and segmentation models for enterprise workloads and critical applications.
• Integrate Illumio with SIEM/SOAR, CMDB, C2C, vulnerability scanners, cloud-native controls, and enterprise automation pipelines.
• Conduct traffic flow analysis using Illumio VEN telemetry and build policy recommendations to reduce attack surface and limit east-west movement.
• Troubleshoot system performance, VEN installation issues, policy conflicts, and platform health across distributed infrastructure.
• Partner with application owners to onboard workloads, validate segmentation plans, and support change management processes.
• Contribute to architectural standards, documentation, and enterprise security playbooks.

Requirements

• 5+ years in cybersecurity, cloud security, or infrastructure engineering.
• 3+ years of expertise in Linux/Windows systems, virtualization (VMware, Hyper-V), and cloud environments (AWS, Azure, or GCP).
• 2+ years of experience with network security (firewalls, routing, segmentation models, TCP/IP).
• 2+ years of experience developing and deploying solutions for highly regulated mission-critical environments (finance, healthcare, federal, or energy).
• 1+ year experience with infrastructure automation tools (Ansible, Terraform, or similar).
• 1+ year experience with REST APIs, scripting (Python, Bash, PowerShell), or automation frameworks.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities.
• Active DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND.
• Experience with CMDB systems (ServiceNow), SIEM/SOAR tools, or vulnerability management platforms.
• Strong understanding of Zero Trust principles, micro-segmentation, and lateral movement mitigation.
• Strong analytical and problem-solving skills with the ability to translate policies into technical controls.

Benefits

• Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm.
• Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS.
• 401k Contribution from Day 1.
• PTO + 11 Paid Federal Holidays.
• Long & Short Term Disability Insurance.
• Group Term Life Insurance.
• Tuition, Certification & Professional Development Assistance.
• Relocation Assistance.