Network Security Microsegmentation Engineer

247Hire; Vienna (VA); On-site; USD 110,000 - 140,000; Full time

Job summary

247Hire is seeking a cybersecurity engineer focused on microsegmentation and Zero Trust to join our security team in Virginia. The role requires hands-on Illumio experience and strong networking fundamentals to design, implement, and enforce segmentation across hybrid and on-prem environments.

You will analyze traffic flows, troubleshoot connectivity issues, and collaborate with application and infrastructure teams while documenting design and policy procedures.

Qualifications

• 5+ years' experience in network security or cybersecurity engineering.
• Hands-on experience with Illumio.
• Strong understanding of Zero Trust principles.
• Solid networking fundamentals (TCP/IP, DNS, routing, firewalls).
• Experience with firewall policy design and traffic analysis.
• Experience with Windows and Linux.

Responsibilities

• Design, implement, and maintain microsegmentation policies using Illumio.
• Analyze application communication flows and define dependencies.
• Enforce least-privilege access aligned to Zero Trust principles.
• Deploy segmentation policies across hybrid and on-prem environments.
• Collaborate with application and infrastructure teams.
• Troubleshoot blocked or unexpected traffic.
• Support change management and policy lifecycle operations.
• Document segmentation design and procedures.

Skills

Illumio

Zero Trust

Network security

Firewall policy design

Traffic analysis

Windows

Linux

PowerShell

Python

Cloud security

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

LogRhythm

Palo Alto Networks

Check Point

Microsoft 365 Defender

Wireshark

Job description

Key Responsibilities:

• Design, implement, and maintain microsegmentation policies using Illumio.
• Analyze application communication flows and define dependencies.
• Enforce least-privilege access aligned to Zero Trust principles.
• Deploy segmentation policies across hybrid and on-prem environments.
• Collaborate with application and infrastructure teams.
• Troubleshoot blocked or unexpected traffic.
• Support change management and policy lifecycle operations.
• Document segmentation design and procedures.

Qualifications:

• 5+ years' experience in network security or cybersecurity engineering.
• Hands-on experience with Illumio.
• Strong understanding of Zero Trust principles.
• Solid networking fundamentals (TCP/IP, DNS, routing, firewalls).
• Experience with firewall policy design and traffic analysis.
• Strong understanding of network security technologies including firewalls, routing, ACLs, traffic analysis, and policy enforcement across on-premises and cloud environments.
• Experience analyzing network traffic and security logs to troubleshoot application connectivity and segmentation-related issues.
• Strong troubleshooting skills.
• Experience with Windows and Linux.

Preferred Qualifications:

• Experience implementing microsegmentation policies at enterprise scale.
• Cloud security experience in Azure, AWS, and/or GCP environments.
• Hands-on experience with Palo Alto Networks and/or Check Point firewall administration, policy management, and traffic analysis.
• Experience using Splunk or similar SIEM and log analytics platforms (e.g., Microsoft Sentinel, QRadar, Elastic, LogRhythm) for security monitoring, troubleshooting, and traffic investigation.
• Familiarity with security tools including SIEM, EDR, vulnerability management, and network visibility platforms.
• Scripting or automation experience using PowerShell, Python, or similar languages.
• Relevant security certifications such as CISSP, CCNP Security, PCNSE, CCSM, Security+, or equivalent.