Information Security Engineer | JPC - 48698

Required: Operate and mature the Illumio micro-segmentation platform (SaaS with limited on-prem presence), including VEN agent lifecycle management across Windows, Linux, and future AIX workloads. Design, validate, and deploy least-privilege segmentation policies, ensuring policy changes can be safely verified via traffic telemetry before and after enforcement. Analyze traffic flow telemetry and delay metrics across ingestion pipelines and SIEM tooling to validate platform health, identify regressions, and distinguish policy issues from platform or vendor constraints. Lead incident response and vendor escalation with Illumio engineering, including capacity constraints, SaaS scaling events, maintenance windows, and potential data integrity risks. Partner with Network Engineering, NOC/NMC, application teams, and platform owners to coordinate production changes, policy deployments, and change-management activities. Maintain and evolve security standards, baselines, and deployment guidance for enterprise micro-segmentation, aligning to internal governance, audit, and risk requirements. Support large-scale onboarding and migration efforts, including SaaS cutovers, phased policy enforcement, and certification of segmentation controls for high-risk and payment applications. Nice-to-Haves (Certifications / Extras): Security and Architecture: CISSP, CCSP, or comparable security architecture certification Zero Trust–focused training or vendor micro-segmentation certifications Cloud and Identity: Familiarity with Azure and enterprise IAM concepts (SaaS authentication, RBAC, API access) Advanced Platform Integration: Experience integrating segmentation telemetry into SIEM, data lakes, or automation pipelines Exposure to policy certification, audit traceability, or regulatory reporting.

Skills

• Micro-Segmentation Network Macro-Segmentation