> Markdown version of [/jobs/ext/585564-illumio-zero-trust-segmentation-platform-engineer](https://www.wearedevelopers.com/jobs/ext/585564-illumio-zero-trust-segmentation-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Illumio Zero Trust Segmentation Platform Engineer... - **Company:** ENS Solutions, LLC - **Location:** College Park, MD, United States - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Microsoft Azure, Bash Shell, Cloud Computing Security, Cloud Engineering, Configuration Management Databases, Cyber Security, Linux, Distributed Systems, Hyper-V, Information Technology Operations, Python (Programming Language), Network Security, Routing, Network Segmentation, Windows PowerShell, Ansible, Zero Trust Network Access, Runbook, Security Information and Event Management, TCP/IP, Virtualization Technology, Software Vulnerability Management, Scripting, Cloud Platform System, Delivery Pipeline, Firewalls (Computer Science), Infrastructure Automation Frameworks, Information Technology, Restful APIs, Terraform, Servicenow, Vulnerability Analysis, Vmware - **Published:** June 18, 2026 - **Apply:** https://www.juju.com/job/00000000g8z6ey ## About the Role + 5+ years in cybersecurity, cloud security, or infrastructure engineering. + 3+ years of expertise in Linux/Windows systems, virtualization (VMware, Hyper-V), and cloud environments (AWS, Azure, or GCP). + 2+ years of experience with network security (firewalls, routing, segmentation models, TCP/IP). + 2+ years of experience developing and deploying solutions for highly regulated mission-critical environments (finance, healthcare, federal, or energy). + 1+ year experience with infrastructure automation tools (Ansible, Terraform, or similar). + 1+ year experience with REST APIs, scripting (Python, Bash, PowerShell), or automation frameworks. + Active TS/SCI clearance; willingness to take a polygraph exam + Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ years of experience supporting IT projects and activities. Years of experience may be accepted in lieu of degree. + Active DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND + Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND certification within 30 days of start date Additional Qualifications + Prior Hands-on experience deploying and managing Illumio Adaptive Security Platform (ASP) in enterprise environments. + Illumio certifications (e.g., Illumio ASP Professional or Expert). + Experience with CMDB systems (ServiceNow), SIEM/SOAR tools, or vulnerability management platforms. + Strong understanding of Zero Trust principles, micro-segmentation, and lateral movement mitigation + Strong analytical and problem-solving skills with the ability to translate policies into technical controls. ## Description We are seeking an experienced Illumio Zero Trust Segmentation Platform Engineer to lead the design, implementation, and operational support of our enterprise micro-segmentation strategy. This role will own the Illumio Adaptive Security Platform (ASP) across hybrid environments and play a critical part in our Zero Trust initiative, partnering with security architects, cloud engineers, application teams, and IT operations to reduce lateral movement risk and strengthen our overall security posture., + Lead the design, deployment, configuration, and optimization of Illumio Core and Illumio Edge across on-premises, virtualized, and cloud environments. + Architect and implement Zero Trust Segmentation policies, including application dependency mapping, labeling frameworks, enforcement boundaries, and zone-based controls. + Develop Illumio workflows, runbooks, dashboards, and segmentation models for enterprise workloads and critical applications. + Integrate Illumio with SIEM/SOAR, CMDB, C2C, vulnerability scanners, cloud-native controls, and enterprise automation pipelines. + Conduct traffic flow analysis using Illumio VEN telemetry and build policy recommendations to reduce attack surface and limit east-west movement. + Troubleshoot system performance, VEN installation issues, policy conflicts, and platform health across distributed infrastructure. + Partner with application owners to onboard workloads, validate segmentation plans, and support change management processes. + Perform lifecycle management: upgrades, health checks, certificate operations, and policy governance. + Collaborate with security architects to align Illumio policy models with broader Zero Trust and NIST 800-207 strategies. + Contribute to architectural standards, documentation, and enterprise security playbooks. ## Related Videos - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)