Network Security Microsegmentation Engineer (Remote)

A financial services firm in Virginia is looking to add a new Network Security Microsegmentation Engineer to their team in a Remote capacity. In this role, the Network Security Microsegmentation Engineer will be responsible for designing, implementing, and managing microsegmentation controls to improve security and reduce lateral movement risk across enterprise environments.

About the Opportunity:

• Schedule: Monday to Friday

• Hours: Standard business hours

• Setting: Remote

Responsibilities:

• Design, implement, and maintain microsegmentation policies using Illumio

• Analyze application communication flows and identify workload dependencies

• Enforce least-privilege access in alignment with Zero Trust security principles

• Deploy segmentation policies across hybrid and on-premises environments

• Collaborate with application, infrastructure, cybersecurity, and architecture teams to support secure application communication

Qualifications:

• 5+ years of experience in Network Security or Cybersecurity Engineering

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience

• Hands-on experience with Illumio microsegmentation

• Strong understanding of Zero Trust security principles

• Strong knowledge of networking fundamentals, including TCP/IP, DNS, routing, firewalls, ACLs, and traffic analysis

• Experience designing and managing firewall policies

• Experience troubleshooting network connectivity and security-related issues

• Experience supporting both Windows and Linux environments

• Excellent analytical, problem-solving, and communication skills

Desired Skills:

• Relevant certifications such as CISSP, CCNP Security, PCNSE, CCSM, or Security+

• Experience implementing enterprise-scale microsegmentation initiatives

• Cloud security experience with Azure, AWS, or GCP

• Experience administering Palo Alto Networks or Check Point firewalls

• Experience with Splunk or other SIEM platforms such as Microsoft Sentinel, QRadar, Elastic, or LogRhythm

• Familiarity with EDR, vulnerability management, and network visibility tools

• Scripting or automation experience using PowerShell, Python, or similar languages