Network Security Microsegmentation Engineer Job at System One, Merrifield, VA

UTFyUGdNaFFSUWpjcWxJcnFTVGFOd3ZiWkE9PQ==
  • System One
  • Merrifield, VA

Job Description

Job Title: Senior Network Security Microsegmentation Engineer

Compensation: Open to Both C2C and W2 options

Work Model: Remote, candidates must live in the United States

We are currently seeking a Senior Network Security Microsegmentation Engineer role. This role requires a minimum of 10 years of professional experience (ideally 12+ years) and extensive, hands on experience with Illumio (no less than 8 years of experience).



This is a senior, hands-on network security engineering role focused on implementing Zero Trust and microsegmentation across enterprise environments. The engineer will primarily use Illumio to analyze application traffic and dependencies, create and enforce least-privilege segmentation policies, reduce lateral movement, and securely control workload-to-workload communication. The role requires someone with a strong network security foundation and 10+ years of cybersecurity/network security experience, plus practical Illumio experience. The engineer will work closely with application, infrastructure, cybersecurity, and architecture teams and will be responsible for traffic analysis, firewall/policy management, troubleshooting connectivity issues, policy lifecycle/change management, and production support across on-premises, hybrid, and potentially cloud environments.



We are looking for someone who can take an application from traffic discovery to dependency mapping to segmentation policy design to policy deployment to troubleshooting to ongoing policy management without creating production outages. The most important combination of experience must include Illumio, Network Security, Zero Trust, Traffic Analysis, Firewall Policy, and Enterprise Troubleshooting. A minimum of 10+ years of network security/cybersecurity experience and hands-on Illumio experience are KEY, because this is not simply a general cybersecurity or network administration position.



Network Security Microsegmentation Engineer will help advance our enterprise Zero Trust security strategy. This role will focus on designing, implementing, and supporting microsegmentation controls using Illumio to reduce lateral movement risk and enforce least-privilege access across enterprise workloads.



The successful candidate will have strong network security experience, practical knowledge of network fundamentals, and hands-on exposure to Illumio or similar microsegmentation platforms. This individual will partner closely with application, infrastructure, cybersecurity, and architecture teams to analyze traffic flows, build segmentation policies, troubleshoot connectivity issues, and support secure application communication.



This is a hands-on engineering role suited for someone who understands both the technical depth of network security and the operational discipline required to implement segmentation safely in production environments.



The Network Security Microsegmentation Engineer will support the design, implementation, and operational management of enterprise microsegmentation capabilities. This role will focus on securing application workloads and supporting Zero Trust initiatives using Illumio.



Key Responsibilities

  • Design, implement, and maintain microsegmentation policies using Illumio.
  • Analyze application communication flows and define dependencies.
  • Enforce least-privilege access aligned to Zero Trust principles.
  • Deploy segmentation policies across hybrid and on-prem environments.
  • Collaborate with application and infrastructure teams.
  • Troubleshoot blocked or unexpected traffic.
  • Support change management and policy lifecycle operations.
  • Document segmentation design and procedures.
Required Qualifications
  • 10+ years experience in network security or cybersecurity engineering.
  • Hands-on experience with Illumio (minimum 8 years)
  • Strong understanding of Zero Trust principles.
  • Solid networking fundamentals (TCP/IP, DNS, routing, firewalls).
  • Experience with firewall policy design and traffic analysis.
  • Strong understanding of network security technologies including firewalls, routing, ACLs, traffic analysis, and policy enforcement across on-premises and cloud environments.
  • Experience analyzing network traffic and security logs to troubleshoot application connectivity and segmentation-related issues.
  • Strong troubleshooting skills.
  • Experience with Windows and Linux.
Preferred Qualifications
  • Experience implementing microsegmentation policies at enterprise scale .
  • Cloud security experience in Azure, AWS, and/or GCP environments.
  • Hands-on experience with Palo Alto Networks and/or Check Point firewall administration, policy management, and traffic analysis.
  • Experience using Splunk or similar SIEM and log analytics platforms (e.g., Microsoft Sentinel, QRadar, Elastic, LogRhythm) for security monitoring, troubleshooting, and traffic investigation.
  • Familiarity with security tools including SIEM, EDR, vulnerability management, and network visibility platforms.
  • Scripting or automation experience using PowerShell, Python, or similar languages.
  • Relevant security certifications such as CISSP, CCNP Security, PCNSE, CCSM, Security+, or equivalent

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M-
#LI-
Ref: #851-Rockville-S1

Job Tags

Contract work, Live in, Local area, Remote work

Similar Jobs

Aqua-Tots Swim School

Team Member Job at Aqua-Tots Swim School

 ...Team Member - Swim Instructor / Front Desk / Water Watcher Aqua-Tots Swim School | Part-Time | Starting at $15/hour | Paid Training | Flexible Scheduling Looking for a fun, meaningful part-time job where you can work with kids, build confidence, and be part of a... 

Dubsmash

Engineering Manager, Data Pipeline Job at Dubsmash

 ...the demands of Reddits rapidly growing user base and evolving business. Were looking for an Engineering Manager to lead our Data Pipeline team, which owns the infrastructure responsible for generating, ingesting, and processing petabytes of data over 250... 

Touchpoint 360, LLC

Retail Merchandiser Job at Touchpoint 360, LLC

 ...customers. Whether it is shopper educations, installation, merchandising, or whole store remodels, we dont stop providing world-...  ...as a drug-free company. TouchPoint360 is hiring strong Traveling Retail Merchandiser / Installers who can travel and be gone four to... 

national staffing solutions

Physical Therapist - Rehab Job at national staffing solutions

 ...Physical Therapist - Rehab Location: Elkhart, Indiana Start Date: 08-05-2026 End Date: 11-04-2026 Contract Type: Travel Contract Shift Type: Monday - Friday, 8:00 AM - 4:00 PM (Day shift, 40 hours/week) Hours per Week: 40 Candidate Pay Rate:... 

Exxon Mobil

Post Doctorate Research Associate Job at Exxon Mobil

 ...join our interdisciplinary research team at ExxonMobil Biomedical Sciences, Inc. (EMBSI). The Associate will support and lead a diverse...  ...collaborators, advancing our understanding of the water, soil, plant, animal nexus, including surface-groundwater interactions. In addition,...