- Company Name
- KamisPro
- Job Title
- Platform Engineer (Security)
- Job Description
-
Job Title: Platform Engineer (Security)
Role Summary: Design, deploy, and manage Illumio Adaptive Security Platform (ASP) micro‑segmentation to enforce Zero Trust across on‑prem, virtualized, and cloud environments.
Expactations: Own end‑to‑end segmentation strategy, including policy development, integration with SIEM/SOAR, and operational support to reduce lateral movement risk.
Key Responsibilities:
- Lead design, deployment, and optimization of Illumio Core and Edge in hybrid infrastructures.
- Architect Zero Trust segmentation policies: application mapping, labeling, zone controls, and enforcement boundaries.
- Build and maintain Illumio dashboards, runbooks, and segmentation models for enterprise workloads.
- Integrate Illumio with SIEM/SOAR, CMDB, vulnerability scanners, cloud security controls, and automation pipelines.
- Analyze VEN telemetry to recommend traffic flow optimizations and minimize attack surface.
- Collaborate with application owners, infrastructure, and security teams to scale segmentation strategies.
- Provide troubleshooting, operational support, and continuous improvement of deployed controls.
Required Skills:
- 5+ years cybersecurity/infrastructure engineering; 3+ years Linux/Windows and virtualization (VMware, Hyper‑V).
- 2+ years network security experience (firewalls, routing, TCP/IP, segmentation).
- 2+ years serving in highly regulated, mission‑critical environments.
- 1+ year automation with Ansible, Terraform, or similar; scripting in Python, Bash, PowerShell; REST API usage.
- Hands‑on Illumio ASP implementation and integration with CMDB, SIEM/SOAR, and vulnerability tools.
- Strong Zero Trust, micro‑segmentation, and lateral movement mitigation knowledge.
Required Education & Certifications:
- TS/SCI clearance; willing to take polygraph.
- One of: Associate’s degree +5 years IT experience; Bachelor’s degree +3 years IT experience; Master’s degree +1 year IT experience.
- DoD 8570.01‑M Information Assurance Technician (IAT) Level II (e.g., Security+, CCNA‑Security, GSEC, SSCP, CySA+, GICSP, CND).
- Ability to obtain DoD 8570.01‑M Cybersecurity Service Provider – Infrastructure Support within 30 days.
- Illumio ASP Professional/Expert certification preferred.
Washington, United states
On site
Mid level
12-01-2026