Illumio Zero Trust Segmentation Platform Engineer

Booz Allen Hamilton11 months ago
Colorado Springs, CO, United States
Hybrid
Full-time
Junior Level (1-3 years)

Job Description

Position Overview

The Illumio Zero Trust Segmentation Platform Engineer will lead the design, deployment, configuration, and optimization of Illumio Core and Edge solutions across on‑premises, virtualized, and cloud environments. In this role, you will architect and implement Zero Trust Segmentation policies, develop automated workflows and runbooks, integrate with SIEM/SOAR and other security tools, and collaborate with application and security teams to enhance the organization’s security posture.

Key Responsibilities

  • Lead the design, deployment, configuration, and optimization of Illumio Core and Illumio Edge across multiple environments.
  • Support architecting and implementing Zero Trust Segmentation policies, including application dependency mapping and zone‑based controls.
  • Develop Illumio workflows, runbooks, dashboards, and segmentation models for enterprise workloads and critical applications.
  • Integrate Illumio with SIEM/SOAR, CMDB, vulnerability scanners, cloud‑native controls, and automation pipelines.
  • Conduct traffic flow analysis using Illumio VEN telemetry and build policy recommendations to reduce attack surface and lateral movement.
  • Troubleshoot system performance, VEN installation issues, policy conflicts, and overall platform health.
  • Partner with application owners to onboard workloads, validate segmentation plans, and support change management processes.
  • Perform lifecycle management, including upgrades, health checks, certificate operations, and policy governance.
  • Collaborate with security architects to align Illumio policy models with broader Zero Trust and NIST 800‑207 strategies.
  • Contribute to architectural standards, documentation, and enterprise security playbooks.

Required Qualifications

  • 5+ years of experience in cybersecurity, cloud security, or infrastructure engineering.
  • 3+ years of experience with Linux/Windows systems, virtualization (VMware or Hyper‑V), and cloud environments (AWS, Azure, or GCP).
  • 2+ years of experience with network security, including firewalls, routing, segmentation models, or TCP/IP.
  • 2+ years of experience developing and deploying solutions in highly regulated, mission‑critical environments (finance, healthcare, federal, or energy).
  • 1+ years of experience with infrastructure automation tools such as Ansible or Terraform.
  • 1+ years of experience with REST APIs and scripting (Python, Bash, or PowerShell) or automation frameworks.
  • Active TS/SCI clearance with willingness to take a polygraph exam.
  • Appropriate educational background: Associate’s degree with 5+ years, Bachelor’s degree with 3+ years, or Master’s degree with 1+ year of IT project experience.
  • DoD 8570.01‑M Information Assurance Technician (IAT) Level II Certification (e.g., Security+ CE, CCNA‑Security, GSEC, etc.).
  • Ability to obtain a DoD 8570.01‑M Cybersecurity Service Provider - Infrastructure Support Certification within 30 days of the start date.

Preferred Qualifications

  • Experience deploying and managing the Illumio Adaptive Security Platform (ASP) in enterprise environments.
  • Experience with CMDB systems (e.g., ServiceNow), SIEM/SOAR tools, or vulnerability management platforms.
  • Knowledge of Zero Trust principles, micro‑segmentation, and lateral movement mitigation.
  • Ability to translate security policies into technical controls.
  • Strong analytical and problem‑solving skills.
  • Illumio certifications such as Illumio ASP Professional or Illumio ASP Expert.

Benefits & Perks

  • Health, Life, Disability, Financial, and Retirement Benefits are provided for eligible full‑time and part‑time employees working at least 20 hours per week.
  • Paid Leave, Professional Development, Tuition Assistance, Work‑Life Programs, and Dependent Care offerings support your total well‑being.
  • Competitive Compensation: The projected salary range for this position is $77,600.00 to $176,000.00 (annualized USD). Salary is determined based on factors such as location, education, skills, and experience.
  • A Recognition Awards Program acknowledges employees for exceptional performance and alignment with company values.
  • For full details on our benefit programs, please visit the Booz Allen Careers site.

Required Skills

GCP
Illumio Zero Trust Segmentation
Vulnerability Scanning
Zero Trust Architecture
TCP/IP
Network Segmentation
Linux
SIEM/SOAR Integration
VMware
Cybersecurity
Firewalls
Windows
Scripting
AWS
Python
Terraform
Bash
Azure
CMDB Integration
Illumio Adaptive Security Platform
Ansible
Cloud Security