Mid-Level Illumio Zero Trust Segmentation Platform Engineer

Mid-Level Illumio Zero Trust Segmentation Platform Engineer
Location: Reston, VA
Required Clearance: Active TS/SCI with Polygraph
Employment Type: Full-Time Regular
Shift: Day
Travel: No
Relocation Assistance: Yes
Company Overview
We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important.
Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver. There is no challenge we can't turn into an opportunity.
Position Overview
Ennoble First is seeking a Mid-Level Illumio Zero Trust Segmentation Platform Engineer to support an Intelligence Community customer in Reston, Virginia. This hands-on engineering role focuses on implementing, administering, and supporting Zero Trust segmentation capabilities across enterprise infrastructure, cloud, and virtualized environments.
The engineer will work with cybersecurity, infrastructure, cloud, and application teams to support microsegmentation, application dependency mapping, policy implementation, platform integrations, and automation while helping strengthen the security and resiliency of mission environments.
Primary Responsibilities

• Engineer, administer, and support Zero Trust segmentation and microsegmentation capabilities across enterprise environments.
• Support deployment, configuration, and operation of Illumio Core and Illumio Edge.
• Develop and implement segmentation policies based on application dependencies, workloads, security requirements, and network traffic.
• Use workload and VEN telemetry to analyze application communication patterns and support application dependency mapping.
• Support integration of Illumio with enterprise security and management platforms, including SIEM, SOAR, and CMDB technologies.
• Troubleshoot segmentation, connectivity, policy, and platform-integration issues.
• Support Zero Trust security architecture and implementation activities.
• Work across physical, virtualized, cloud, and hybrid infrastructure environments.
• Support VMware and Hyper-V environments and cloud platforms such as AWS, Azure, and GCP.
• Develop scripts and automation to improve platform deployment, configuration, and operations.
• Use APIs and automation technologies to integrate segmentation capabilities with enterprise systems and workflows.
• Collaborate with cybersecurity, network, cloud, infrastructure, and application teams to define and implement segmentation requirements.
• Develop and maintain technical documentation, configuration information, and operational procedures.

Required Qualifications

• 5+ years of experience in cybersecurity, cloud, infrastructure, or related technical environments.
• 3+ years of experience supporting systems, infrastructure, cloud, or security engineering activities.
• Experience with Zero Trust concepts, network segmentation, microsegmentation, or related security architectures.
• Experience supporting enterprise networking and application communication flows.
• Experience with virtualization technologies such as VMware or Hyper-V.
• Experience supporting cloud environments such as AWS, Azure, or GCP.
• Experience with automation, scripting, and API-based integrations.
• Experience integrating security or infrastructure platforms with enterprise technologies such as SIEM, SOAR, or CMDB solutions.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to obtain a qualifying CSSP-IS certification within 30 days of offer acceptance, such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
• Ability to obtain a qualifying IAT Level III certification within 45 days of obtaining the CSSP-IS certification, or within 45 days of offer acceptance if already CSSP-IS qualified. Qualifying certifications include SecurityX (formerly CASP+), CCNP Security, CISA, CISSP or Associate of ISC2, GCED, GCIH, or CCSP.

Preferred Qualifications

• Hands-on experience with Illumio Core and/or Illumio Edge.
• Experience implementing Illumio segmentation policies in enterprise environments.
• Illumio certification.
• Experience with application dependency mapping and VEN telemetry.
• Experience supporting Intelligence Community or other classified environments.
• Experience implementing Zero Trust architectures in large enterprise environments.
• Strong interpersonal and customer relationship skills.
• Excellent verbal and written communication skills.

Pay Range
$130,000-$155,000
The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
Equal Employment Opportunity
Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.
E-Verify Participation
Ennoble First participates in E-Verify. Learn more at www.dhs.gov/E-Verify.
E-Verify is a registered trademark of the U.S. Department of Homeland Security.



Location:
Required Clearance:
Employment Type: Full-Time Regular
Shift: Day
Travel: No
Relocation Assistance: Yes

---

Primary Responsibilities:

Minimum Education/Experience Requirements:

Desired Skills: