Contingent REQUIRES AN EXISTING/ACTIVE TS/SCI WITH CI POLYGRAPH - NO REMOTE WORK, MUST WORK ON SITE
Location: Reston, VA or Washington, DC
Funding Status: Contingent
Position Overview
DAn Solutions is seeking a Mid-Level Illumio Zero Trust Platform Engineer to support the design, deployment, configuration, and optimization of Illumio Core and Illumio Edge across on-premises, virtualized, and cloud environments.
This position will support the implementation of Zero Trust Segmentation policies and enterprise micro-segmentation capabilities designed to reduce attack surfaces and limit lateral movement across mission-critical environments.
Key Responsibilities
- Design, deploy, configure, and optimize Illumio Core and Illumio Edge.
- Architect and implement Zero Trust Segmentation policies.
- Perform application dependency mapping and develop labeling frameworks, enforcement boundaries, and zone-based controls.
- Develop Illumio workflows, runbooks, dashboards, and segmentation models.
- Integrate Illumio with SIEM/SOAR platforms, CMDB systems, C2C, vulnerability scanners, cloud-native controls, and automation pipelines.
- Analyze network traffic flows using Illumio VEN telemetry.
- Develop policy recommendations to reduce attack surfaces and limit east-west/lateral movement.
- Troubleshoot VEN installation issues, system performance, policy conflicts, and overall platform health.
- Partner with application owners to onboard workloads and validate segmentation plans.
- Support organizational change-management processes associated with segmentation.
- Perform platform lifecycle management, including upgrades, health checks, certificate operations, and policy governance.
- Work with security architects to align Illumio policy models with enterprise Zero Trust and NIST 800-207 strategies.
- Develop architectural standards, documentation, and enterprise security playbooks.
Required Qualifications
- 5+ years of experience in cybersecurity, cloud security, or infrastructure engineering.
- 3+ years working with Linux/Windows systems, virtualization technologies such as VMware or Hyper-V, and cloud environments such as AWS, Azure, or GCP.
- 2+ years developing and deploying solutions within highly regulated or mission-critical environments.
- Experience with infrastructure automation tools such as Ansible or Terraform.
- Experience with REST APIs and scripting technologies such as Python, Bash, or PowerShell.
- Knowledge of Zero Trust principles, micro-segmentation, and lateral-movement mitigation.
- Ability to translate security policies into technical controls.
Education & Experience
Candidates must meet one of the following:
- Associate's Degree + 5 years supporting IT projects and activities
- Bachelor's Degree + 3 years
- Master's Degree + 1 year
Preferred Qualifications
- Experience deploying and managing Illumio Adaptive Security Platform (ASP) in enterprise environments.
- Experience with ServiceNow or other CMDB systems.
- Experience with SIEM/SOAR and vulnerability-management platforms.
- Illumio certifications such as:
- Illumio Platform Associate
- Illumio Platform Specialist
- Illumio Platform Expert
- Illumio Platform On-Prem PCE Administrator
Certification Requirements
- Ability to obtain an approved DoD 8570 CSSP-IS certification within 30 days of offer acceptance.
- Ability to obtain an approved IAT Level III certification within 45 days of the CSSP-IS date, or within 45 days of offer acceptance if the candidate already possesses CSSP-IS.
Salary Range Disclaimer: The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications