Mid-Level Illumio Zero Trust Segmentation Platform Engineer

Primary Responsibilities

• Engineer, administer, and support Zero Trust segmentation and microsegmentation capabilities across enterprise environments.
• Support deployment, configuration, and operation of Illumio Core and Illumio Edge.
• Develop and implement segmentation policies based on application dependencies, workloads, security requirements, and network traffic.
• Use workload and VEN telemetry to analyze application communication patterns and support application dependency mapping.
• Support integration of Illumio with enterprise security and management platforms, including SIEM, SOAR, and CMDB technologies.
• Troubleshoot segmentation, connectivity, policy, and platform-integration issues.
• Support Zero Trust security architecture and implementation activities.
• Work across physical, virtualized, cloud, and hybrid infrastructure environments.
• Support VMware and Hyper-V environments and cloud platforms such as AWS, Azure, and GCP.
• Develop scripts and automation to improve platform deployment, configuration, and operations.
• Use APIs and automation technologies to integrate segmentation capabilities with enterprise systems and workflows.
• Collaborate with cybersecurity, network, cloud, infrastructure, and application teams to define and implement segmentation requirements.
• Develop and maintain technical documentation, configuration information, and operational procedures.

Required Qualifications

• 5+ years of experience in cybersecurity, cloud, infrastructure, or related technical environments.
• 3+ years of experience supporting systems, infrastructure, cloud, or security engineering activities.
• Experience with Zero Trust concepts, network segmentation, microsegmentation, or related security architectures.
• Experience supporting enterprise networking and application communication flows.
• Experience with virtualization technologies such as VMware or Hyper-V.
• Experience supporting cloud environments such as AWS, Azure, or GCP.
• Experience with automation, scripting, and API-based integrations.
• Experience integrating security or infrastructure platforms with enterprise technologies such as SIEM, SOAR, or CMDB solutions.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to obtain a qualifying CSSP-IS certification within 30 days of offer acceptance, such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
• Ability to obtain a qualifying IAT Level III certification within 45 days of obtaining the CSSP-IS certification, or within 45 days of offer acceptance if already CSSP-IS qualified.