Remote Illumio Microsegmentation Engineer, Zero Trust

System One; Vienna (VA); On-site; USD 96,432 - 165,312; Full time

Job summary

System One is seeking a Network Security Microsegmentation Engineer to join our remote team. You will implement and operate an enterprise Zero Trust security strategy using Illumio, analyzing traffic and enforcing segmentation policies across on-prem and cloud workloads.

Ideal candidates have 7+ years in network security, 5+ years with Illumio, and strong fundamentals in TCP/IP, firewalls, and logging. Collaboration with infrastructure, cybersecurity, and architecture teams is essential.

Qualifications

• 7+ years of professional network security experience.
• 5+ years hands-on Illumio experience.
• Strong understanding of Zero Trust principles.
• Solid networking fundamentals (TCP/IP, DNS, routing, firewalls).
• Experience with firewall policy design and traffic analysis.
• Experience with Windows and Linux.

Responsibilities

• Design, implement, and maintain microsegmentation policies using Illumio.
• Analyze application communication flows and define dependencies.
• Enforce least‑privilege access aligned to Zero Trust principles.
• Deploy segmentation policies across hybrid and on‑prem environments.
• Collaborate with application and infrastructure teams.
• Troubleshoot blocked or unexpected traffic.
• Support change management and policy lifecycle operations.
• Document segmentation design and procedures.

Skills

Illumio

Zero Trust

Networking fundamentals

Firewalls

Troubleshooting

Windows

Linux

Azure

AWS

GCP

Palo Alto Networks

Check Point

Splunk

SIEM

Tools

Palo Alto Networks

Check Point

Splunk

SIEM

Job description

System One is seeking a Network Security Microsegmentation Engineer to join our remote team. You will implement and operate an enterprise Zero Trust security strategy using Illumio, analyzing traffic and enforcing segmentation policies across on-prem and cloud workloads.

Ideal candidates have 7+ years in network security, 5+ years with Illumio, and strong fundamentals in TCP/IP, firewalls, and logging. Collaboration with infrastructure, cybersecurity, and architecture teams is essential.