Zero Trust Segmentation Engineer (SaaS Illumio)

PTR Global; Irving (TX); Hybrid; USD 120,000 - 150,000; Full time

Job summary

PTR Global is seeking an Information Security Engineer to advance our Zero Trust micro-segmentation program. You will operate a SaaS-based Illumio platform with limited on-prem presence, manage VEN agents across Windows and Linux, and ensure least-privilege policies are verifiable via telemetry.

You will analyze ingestion pipelines and SIEM telemetry, lead incident response, and coordinate with Network, NOC/NMC, and application teams to deploy changes safely across hybrid environments.

Qualifications

• 4+ years of Information Security Engineering experience or equivalent.
• Experience with production change management and incident response.
• Ability to translate telemetry into executive-level summaries.
• Experience designing least-privilege segmentation policies.
• Familiarity with hybrid on-prem and cloud environments.

Responsibilities

• Operate and mature the Illumio micro-segmentation platform (SaaS with limited on-prem presence).
• Design, validate, and deploy least-privilege segmentation policies with verifiable telemetry.
• Analyze traffic flow telemetry and delay metrics across ingestion pipelines and SIEM tooling.
• Lead incident response and vendor escalation with Illumio engineering.
• Coordinate production changes and policy deployments with cross-functional teams.
• Maintain security standards, baselines, and deployment guidance.
• Support large-scale onboarding and migration efforts, including SaaS cutovers.

Skills

SIEM proficiency

Telemetry analysis

Linux administration

Windows server administration

Incident response

Policy design

Executive-level communication

Tools

Illumio

VEN agent lifecycle

Job description

PTR Global is seeking an Information Security Engineer to advance our Zero Trust micro-segmentation program. You will operate a SaaS-based Illumio platform with limited on-prem presence, manage VEN agents across Windows and Linux, and ensure least-privilege policies are verifiable via telemetry.

You will analyze ingestion pipelines and SIEM telemetry, lead incident response, and coordinate with Network, NOC/NMC, and application teams to deploy changes safely across hybrid environments.