Full-Time
Zero Trust Engineer
Illumio
ENS Solutions
Cybersecurity and federal IT services
No salary listed
No H1B Sponsorship
Washington, DC, USA
In Person
US Top Secret Clearance Required
Bachelor's, Master's, Associate's
Category
 Cybersecurity (1) |
|---|
Required Skills
PowerShell
Bash
Microsoft Azure
Python
ServiceNow
Microsoft Windows
Cybersecurity
Vulnerability Analysis
AWS
Hyper-V
Terraform
VMWare
Ansible
REST APIs
Linux/Unix
Google Cloud Platform
Requirements
- At least 5 years of experience in cybersecurity, cloud security, or infrastructure engineering.
- At least 3 years of expertise with Linux and Windows systems, VMware and Hyper-V virtualization, and AWS, Azure, or Google Cloud Platform environments.
- At least 2 years of experience developing and deploying solutions for highly regulated mission-critical environments such as finance, healthcare, federal, or energy organizations.
- At least 1 year of experience with infrastructure automation tools such as Ansible or Terraform.
- At least 1 year of experience with REST application programming interfaces, Python, Bash, PowerShell, or automation frameworks.
- An active Top Secret/Sensitive Compartmented Information clearance and willingness to take a polygraph exam.
- An Associate’s degree with at least 5 years of experience supporting information technology projects and activities, a Bachelor’s degree with at least 3 years of such experience, or a Master’s degree with at least 1 year of such experience.
- Ability to obtain a Department of Defense 8570.01-M Cybersecurity Service Provider—Infrastructure Support certification, including one of Certified Ethical Hacker, Cybersecurity Analyst, Global Industrial Cyber Security Professional, Systems Security Certified Practitioner, Computer Hacking Forensic Investigator, Cybersecurity Forensics, Cloud+, or Certified Network Defender, within 30 days of offer acceptance.
- Ability to obtain a Department of Defense 8570 Information Assurance Technical Level III certification such as SecurityX, formerly CASP+, Cisco Certified Network Professional Security, Certified Information Systems Auditor, Certified Information Systems Security Professional or Associate, GIAC Certified Enterprise Defender, GIAC Certified Incident Handler, or Certified Cloud Security Professional within 45 days of the CSSP-IS certification date, or offer acceptance if already CSSP-IS certified.
Responsibilities
- Assist in designing, deploying, configuring, and optimizing Illumio Core and Illumio Edge across on-premises, virtualized, and cloud environments.
- Architect and implement Zero Trust Segmentation policies, including application dependency mapping, labeling frameworks, enforcement boundaries, and zone-based controls.
- Develop Illumio workflows, runbooks, dashboards, and segmentation models for enterprise workloads and critical applications.
- Integrate Illumio with security information and event management, security orchestration, automation and response, configuration management databases, C2C, vulnerability scanners, cloud-native controls, and enterprise automation pipelines.
- Conduct traffic flow analysis using Illumio VEN telemetry and build policy recommendations to reduce attack surface and limit east-west movement.
- Troubleshoot system performance, VEN installation issues, policy conflicts, and platform health across distributed infrastructure.
- Partner with application owners to onboard workloads, validate segmentation plans, and support change management processes.
- Perform lifecycle management, including upgrades, health checks, certificate operations, and policy governance.
- Collaborate with security architects to align Illumio policy models with broader Zero Trust and NIST 800-207 strategies.
- Contribute to architectural standards, documentation, and enterprise security playbooks.
Desired Qualifications
- Experience deploying and managing the Illumio Adaptive Security Platform in enterprise environments.
- Experience with configuration management database systems such as ServiceNow, security information and event management and security orchestration, automation and response tools, or vulnerability management platforms.
- Knowledge of Zero Trust principles, micro-segmentation, and lateral movement mitigation.
- Ability to translate policies into technical controls.
- Illumio certifications such as Illumio Platform Associate, Illumio Platform Specialist, Illumio Platform Expert, or Illumio Platform On-Premises Policy Compute Engine Administrator.
- Strong analytical and problem-solving skills.
ENS Solutions is a veteran-owned technology consulting firm serving the Department of Defense, intelligence community and commercial clients. Its capabilities include identity and access management, cyber and network security, software development, systems engineering, geospatial intelligence, program management and IT support. The company builds technical teams around secure, mission-driven environments and supports systems from design through operations. ENS is distinct from similarly named physical-security vendors; its identity is grounded in federal information technology and national-security services.
Company Size
N/A
Company Stage
N/A
Total Funding
N/A
Headquarters
N/A
Founded
N/A