Illumio Zero Trust Segmentation Platform Engineer

Location: College Park, MD; Washington, DC; Reston, VA

Required Clearance: Active TS/SCI with polygraph eligibility

Employment Type: Full-Time Regular

Shift: Day

Travel: No

Relocation Assistance: Yes

Company Overview

We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important. Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver.

Job Description

Ennoble First is seeking an Illumio Zero Trust Segmentation Platform Engineer to support the deployment, operation, and sustainment of enterprise microsegmentation and Zero Trust segmentation capabilities. This role focuses on implementing and maintaining Illumio platforms to enforce least-privilege network communication, reduce attack surface, and provide continuous visibility and control across complex Government environments.

The Illumio Zero Trust Segmentation Platform Engineer works closely with network engineering, cybersecurity operations, and architecture teams to ensure segmentation policies are accurately designed, enforced, and aligned with mission and Zero Trust objectives.

Primary Responsibilities

• Deploy, configure, operate, and sustain Illumio Zero Trust Segmentation platforms in enterprise Government environments
• Design and implement microsegmentation policies to enforce least-privilege communication between workloads, applications, and services
• Map application dependencies and traffic flows to support segmentation policy design and validation
• Integrate Illumio with endpoint, identity, SIEM, and security operations platforms
• Monitor platform health, policy enforcement, and system performance
• Perform upgrades, patching, configuration changes, and lifecycle maintenance
• Troubleshoot policy enforcement issues, visibility gaps, and integration challenges
• Support SOC and cybersecurity operations teams with segmentation visibility and investigative support
• Coordinate with network, system, and application teams to align segmentation policies with operational requirements
• Develop and maintain technical documentation, runbooks, and operational procedures

Required Qualifications

• 5+ years of experience supporting cybersecurity engineering, network security, or security operations
• 3+ years of experience deploying or administering microsegmentation, host-based firewall, or Zero Trust segmentation platforms
• 2+ years of experience deploying, hosting, monitoring, and securing solutions for Government customers
• Strong understanding of enterprise networking concepts, application architectures, and traffic flows
• Experience administering Linux- or agent-based security platforms
• Experience integrating security platforms using APIs or native connectors
• Active TS/SCI clearance with polygraph eligibility

Education

Associate's degree and 5+ years of experience supporting IT projects and activities, or

Bachelor's degree and 3+ years of experience supporting IT projects and activities, or

Master's degree and 1+ year of experience supporting IT projects and activities

Years of experience may be accepted in lieu of degree.

Certifications

DoD 8570.01-M Information Assurance Technician (IAT) Level II certification (e.g., Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND)

Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support certification (e.g., CEH, CHFI, CFR, Cloud+, or CND) within 30 days of start date.

Preferred Qualifications

• Hands-on experience implementing and maintaining Illumio in production environments
• Experience supporting Zero Trust Architecture initiatives
• Experience supporting DoD or Intelligence Community missions
• Familiarity with cloud-hosted workloads and hybrid environments
• Security certifications such as CISSP, CCNP Security, GCIA, or similar

Compensation

Salary range: $120,000 - $150,000

The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered include responsibilities of the role, education, experience, knowledge, skills, internal equity, alignment with market data, and applicable laws.

Equal Employment Opportunity

Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.

E-Verify Participation

Ennoble First participates in E-Verify. Learn more at www.dhs.gov/E-Verify.

E-Verify is a registered trademark of the U.S. Department of Homeland Security.

Ennoble First is committed to providing a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Ennoble First participates in E-Verify.

The information below will be listed on our website's careers landing page.

EEO is the Law | Pay Transparency Nondiscrimination

www.dhs.gov/E-Verify

E-Verify is a registered trademark of the U.S. Department of Homeland Security. This business uses E-Verify in its hiring practices to achieve a lawful workforce.