Mid-Level Illumio Zero Trust Segmentation Platform Engineer

Ennoble First Inc.; Reston (VA); On-site; USD 130,000 - 155,000; Full time

Job summary

Ennoble First is seeking a Mid-Level Illumio Zero Trust Segmentation Platform Engineer to support an Intelligence Community customer in Reston, VA. This hands‑on role focuses on implementing, administering, and supporting Zero Trust segmentation across enterprise infrastructure, cloud, and virtualization.

You will collaborate with cybersecurity, infrastructure, cloud, and application teams to strengthen security and resiliency of mission environments.

Qualifications

• 5+ years in cybersecurity, cloud, infrastructure, or related technical environments.
• 3+ years supporting systems, infrastructure, cloud, or security engineering activities.
• Experience with Zero Trust concepts, network segmentation, microsegmentation, or related security architectures.

Responsibilities

• Engineer, administer, and support Zero Trust segmentation and microsegmentation capabilities across enterprise environments.
• Support deployment, configuration, and operation of Illumio Core and Illumio Edge.
• Develop and implement segmentation policies based on application dependencies, workloads, security requirements, and network traffic.
• Use workload and VEN telemetry to analyze application communication patterns and support application dependency mapping.
• Support integration of Illumio with enterprise security and management platforms, including SIEM, SOAR, and CMDB technologies.
• Troubleshoot segmentation, connectivity, policy, and platform‑integration issues.
• Support Zero Trust security architecture and implementation activities.
• Work across physical, virtualized, cloud, and hybrid infrastructure environments.
• Support VMware and Hyper‑V environments and cloud platforms such as AWS, Azure, and GCP.
• Develop scripts and automation to improve platform deployment, configuration, and operations.
• Use APIs and automation technologies to integrate segmentation capabilities with enterprise systems and workflows.
• Collaborate with cybersecurity, network, cloud, infrastructure, and application teams to define and implement segmentation requirements.
• Develop and maintain technical documentation, configuration information, and operational procedures.

Skills

Zero Trust concepts

Microsegmentation

Automation

Scripting

API integrations

Troubleshooting

VMware

Hyper-V

AWS

Azure

GCP

SIEM integration

CSSP-IS

IAT Level III

Tools

Illumio Core

Illumio Edge

Job description

Location: Reston, VA

Required Clearance: Active TS/SCI with Polygraph

Employment Type: Full-Time Regular

Shift: Day

Travel: No

Relocation Assistance: Yes

Company Overview

We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important.

Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver. There is no challenge we can't turn into an opportunity.

Position Overview

Ennoble First is seeking a Mid-Level Illumio Zero Trust Segmentation Platform Engineer to support an Intelligence Community customer in Reston, Virginia. This hands‑on engineering role focuses on implementing, administering, and supporting Zero Trust segmentation capabilities across enterprise infrastructure, cloud, and virtualized environments.

The engineer will work with cybersecurity, infrastructure, cloud, and application teams to support microsegmentation, application dependency mapping, policy implementation, platform integrations, and automation while helping strengthen the security and resiliency of mission environments.

Primary Responsibilities

• Engineer, administer, and support Zero Trust segmentation and microsegmentation capabilities across enterprise environments.
• Support deployment, configuration, and operation of Illumio Core and Illumio Edge.
• Develop and implement segmentation policies based on application dependencies, workloads, security requirements, and network traffic.
• Use workload and VEN telemetry to analyze application communication patterns and support application dependency mapping.
• Support integration of Illumio with enterprise security and management platforms, including SIEM, SOAR, and CMDB technologies.
• Troubleshoot segmentation, connectivity, policy, and platform‑integration issues.
• Support Zero Trust security architecture and implementation activities.
• Work across physical, virtualized, cloud, and hybrid infrastructure environments.
• Support VMware and Hyper‑V environments and cloud platforms such as AWS, Azure, and GCP.
• Develop scripts and automation to improve platform deployment, configuration, and operations.
• Use APIs and automation technologies to integrate segmentation capabilities with enterprise systems and workflows.
• Collaborate with cybersecurity, network, cloud, infrastructure, and application teams to define and implement segmentation requirements.
• Develop and maintain technical documentation, configuration information, and operational procedures.

Required Qualifications

• 5+ years of experience in cybersecurity, cloud, infrastructure, or related technical environments.
• 3+ years of experience supporting systems, infrastructure, cloud, or security engineering activities.
• Experience with Zero Trust concepts, network segmentation, microsegmentation, or related security architectures.
• Experience supporting enterprise networking and application communication flows.
• Experience with virtualization technologies such as VMware or Hyper‑V.
• Experience supporting cloud environments such as AWS, Azure, or GCP.
• Experience with automation, scripting, and API‑based integrations.
• Experience integrating security or infrastructure platforms with enterprise technologies such as SIEM, SOAR, or CMDB solutions.
• Strong troubleshooting, analytical, and problem‑solving skills.
• Ability to obtain a qualifying CSSP‑IS certification within 30 days of offer acceptance, such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
• Ability to obtain a qualifying IAT Level III certification within 45 days of obtaining the CSSP‑IS certification, or within 45 days of offer acceptance if already CSSP‑IS qualified. Qualifying certifications include SecurityX (formerly CASP+), CCNP Security, CISA, CISSP or Associate of ISC2, GCED, GCIH, or CCSP.

Preferred Qualifications

• Hands‑on experience with Illumio Core and/or Illumio Edge.
• Experience implementing Illumio segmentation policies in enterprise environments.
• Illumio certification.
• Experience with application dependency mapping and VEN telemetry.
• Experience supporting Intelligence Community or other classified environments.
• Experience implementing Zero Trust architectures in large enterprise environments.
• Strong interpersonal and customer relationship skills.
• Excellent verbal and written communication skills.

Pay Range

$130,000-$155,000

The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Equal Employment Opportunity

Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.

Ennoble First is committed to providing a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

E-Verify Participation

Ennoble First participates in E-Verify. Learn more at www.dhs.gov/E-Verify.

E-Verify is a registered trademark of the U.S. Department of Homeland Security.