Illumio Zero Trust Platform Engineer - Mid

DAn Solutions, Inc.; Reston (VA); On-site; USD 110,000 - 170,000; Full time

Job summary

DAn Solutions, Inc. is seeking a Mid-Level Illumio Zero Trust Platform Engineer in Reston, VA.

This on-site role requires an existing TS/SCI with CI polygraph and will focus on deploying Illumio Core and Edge, implementing zero-trust segmentation, and integrating security controls across on‑prem, virtualized, and cloud environments. You will map dependencies, build segmentation models, and collaborate with security architects to align with NIST 800-207.

Qualifications

• 5+ years in cybersecurity, cloud security, or infrastructure engineering.
• 3+ years with Linux/Windows, virtualization, and cloud environments (AWS/Azure/GCP).
• 2+ years in highly regulated or mission-critical environments.
• Experience with Ansible or Terraform.
• Experience with REST APIs and scripting (Python, Bash, PowerShell).
• Knowledge of Zero Trust, micro-segmentation, and lateral-movement mitigation.
• Ability to translate security policies into technical controls.

Responsibilities

• Design, deploy, configure, and optimize Illumio Core and Illumio Edge.
• Architect Zero Trust Segmentation policies.
• Map dependencies and develop labeling frameworks, enforcement boundaries, and zone-based controls.
• Develop Illumio workflows, runbooks, dashboards, and segmentation models.
• Integrate Illumio with SIEM/SOAR, CMDB, and automation pipelines.
• Analyze traffic with Illumio VEN telemetry.
• Recommend policies to reduce attack surfaces and lateral movement.
• Troubleshoot VEN issues, performance, and policy conflicts.
• Partner with app owners to onboard workloads and validate plans.
• Support change-management processes for segmentation.
• Lifecycle management: upgrades, health checks, and policy governance.

Skills

Linux/Windows systems

Virtualization

Cloud environments

Ansible

Terraform

REST APIs

Python

Bash

PowerShell

Zero Trust

Micro-segmentation

Lateral movement mitigation

Education

Associate's Degree in IT

Bachelor's Degree in IT/CS

Master's Degree in IT/CS

Tools

Illumio Core/Edge

VMware/Hyper-V

AWS/Azure/GCP

ServiceNow

CMDB

SIEM/SOAR

Job description

Contingent REQUIRES AN EXISTING/ACTIVE TS/SCI WITH CI POLYGRAPH - NO REMOTE WORK, MUST WORK ON SITE

Job Description

Job Description

Contingent REQUIRES AN EXISTING/ACTIVE TS/SCI WITH CI POLYGRAPH - NO REMOTE WORK, MUST WORK ON SITE

Location: Reston, VA or Washington, DC

Funding Status: Contingent

Position Overview

DAn Solutions is seeking a Mid-Level Illumio Zero Trust Platform Engineer to support the design, deployment, configuration, and optimization of Illumio Core and Illumio Edge across on-premises, virtualized, and cloud environments.

This position will support the implementation of Zero Trust Segmentation policies and enterprise micro-segmentation capabilities designed to reduce attack surfaces and limit lateral movement across mission‑critical environments.

Key Responsibilities

• Design, deploy, configure, and optimize Illumio Core and Illumio Edge .
• Architect and implement Zero Trust Segmentation policies.
• Perform application dependency mapping and develop labeling frameworks, enforcement boundaries, and zone-based controls.
• Develop Illumio workflows, runbooks, dashboards, and segmentation models.
• Integrate Illumio with SIEM/SOAR platforms, CMDB systems, C2C, vulnerability scanners, cloud‑native controls, and automation pipelines .
• Analyze network traffic flows using Illumio VEN telemetry.
• Develop policy recommendations to reduce attack surfaces and limit east-west/lateral movement.
• Troubleshoot VEN installation issues, system performance, policy conflicts, and overall platform health.
• Partner with application owners to onboard workloads and validate segmentation plans.
• Support organizational change‑management processes associated with segmentation.
• Perform platform lifecycle management, including upgrades, health checks, certificate operations, and policy governance.
• Work with security architects to align Illumio policy models with enterprise Zero Trust and NIST 800-207 strategies .
• Develop architectural standards, documentation, and enterprise security playbooks.

Required Qualifications

• 5+ years of experience in cybersecurity, cloud security, or infrastructure engineering.
• 3+ years working with Linux/Windows systems, virtualization technologies such as VMware or Hyper‑V, and cloud environments such as AWS, Azure, or GCP.
• 2+ years developing and deploying solutions within highly regulated or mission‑critical environments.
• Experience with infrastructure automation tools such as Ansible or Terraform .
• Experience with REST APIs and scripting technologies such as Python, Bash, or PowerShell .
• Knowledge of Zero Trust principles, micro‑segmentation, and lateral‑movement mitigation.
• Ability to translate security policies into technical controls.

Education & Experience

Candidates Must Meet One Of The Following

• Associate's Degree + 5 years supporting IT projects and activities
• Bachelor's Degree + 3 years
• Master's Degree + 1 year

Preferred Qualifications

• Experience deploying and managing Illumio Adaptive Security Platform (ASP) in enterprise environments.
• Experience with ServiceNow or other CMDB systems.
• Experience with SIEM/SOAR and vulnerability‑management platforms.
• Illumio certifications such as:
• Illumio Platform Associate
• Illumio Platform Specialist
• Illumio Platform Expert
• Illumio Platform On‑Prem PCE Administrator

Certification Requirements

• Ability to obtain an approved DoD 8570 CSSP‑IS certification within 30 days of offer acceptance .
• Ability to obtain an approved IAT Level III certification within 45 days of the CSSP‑IS date , or within 45 days of offer acceptance if the candidate already possesses CSSP‑IS.

Salary Range Disclaimer

The posted salary range represents the good‑faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications