Illumio Zero Trust Segmentation Platform Engineer

Location: College Park, MD;
Washington, DC;
Reston, VA

Required Clearance: Active TS/SCI with polygraph eligibility

Employment Type: Full-Time Regular

Shift: Day

Travel: No

Relocation Assistance: Yes

Ennoble First supports and secures some of the most complex government, defense, and intelligence projects across the country. Our work has meaning and impact on the world around us, and we deliver daily with autonomy and trust.

Ennoble First is seeking an Illumio Zero Trust Segmentation Platform Engineer to deploy, operate, and sustain enterprise microsegmentation and Zero Trust segmentation capabilities in complex Government environments.

• Deploy, configure, operate, and sustain Illumio Zero Trust Segmentation platforms in enterprise Government environments
• Design and implement microsegmentation policies to enforce least-privilege communication between workloads, applications, and services
• Map application dependencies and traffic flows to support segmentation policy design and validation
• Integrate Illumio with endpoint, identity, SIEM, and security operations platforms
• Monitor platform health, policy enforcement, and system performance
• Perform upgrades, patching, configuration changes, and lifecycle maintenance
• Troubleshoot policy enforcement issues, visibility gaps, and integration challenges
• Support SOC and cybersecurity operations teams with segmentation visibility and investigative support
• Coordinate with network, system, and application teams to align segmentation policies with operational requirements
• Develop and maintain technical documentation, runbooks, and operational procedures

• 5+ years of experience supporting cybersecurity engineering, network security, or security operations
• 3+ years of experience deploying or administering microsegmentation, host-based firewall, or Zero Trust segmentation platforms
• 2+ years of experience deploying, hosting, monitoring, and securing solutions for Government customers
• Strong understanding of enterprise networking concepts, application architectures, and traffic flows
• Experience administering Linux- or agent-based security platforms
• Experience integrating security platforms using APIs or native connectors
• Active TS/SCI clearance with polygraph eligibility

Associate's degree and 5+ years of experience supporting IT projects and activities, or
Bachelor's degree and 3+ years of experience supporting IT projects and activities, or
Master's degree and 1+ year of experience supporting IT projects and activities
Years of experience may be accepted in lieu of degree.

DoD 8570.01-M Information Assurance Technician (IAT) Level II certification (e.g., Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND). Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider – Infrastructure Support certification (e.g., CEH, CHFI, CFR, Cloud+, or CND) within 30 days of start date.

• Hands-on experience implementing and maintaining Illumio in production environments
• Experience supporting Zero Trust Architecture initiatives
• Experience supporting DoD or Intelligence Community missions
• Familiarity with cloud-hosted workloads and hybrid environments
• Security certifications such as CISSP, CCNP Security, GCIA, or similar

Salary range: $120,000 – $150,000
The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered include responsibilities of the role, education, experience, knowledge, skills, internal equity, alignment with market data, and applicable laws.

Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law. Ennoble First is committed to providing a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

E-Verify participation:
Abbout E-Verify. Learn more /E-Verify.