Note: The job is a remote job and is open to candidates in USA. System One is a provider of outsourced services, workforce solutions, staffing, and recruiting. The Senior Network Security Microsegmentation Engineer will design, implement, and support enterprise microsegmentation and Zero Trust controls using Illumio, while analyzing traffic flows, enforcing least-privilege access, troubleshooting connectivity, and managing policies across on-premises, hybrid, and cloud environments.
Responsibilities
- Design, implement, and maintain microsegmentation policies using Illumio
- Analyze application communication flows and define dependencies
- Enforce least-privilege access aligned to Zero Trust principles
- Deploy segmentation policies across hybrid and on-prem environments
- Collaborate with application and infrastructure teams
- Troubleshoot blocked or unexpected traffic
- Support change management and policy lifecycle operations
- Document segmentation design and procedures
Skills
- * 10+ years experience in network security or cybersecurity engineering
- * Hands-on experience with Illumio (minimum 8 years)
- * Strong understanding of Zero Trust principles
- * Solid networking fundamentals (TCP/IP, DNS, routing, firewalls)
- * Experience with firewall policy design and traffic analysis
- * Strong understanding of network security technologies including firewalls, routing, ACLs, traffic analysis, and policy enforcement across on-premises and cloud environments
- * Experience analyzing network traffic and security logs to troubleshoot application connectivity and segmentation-related issues
- * Strong troubleshooting skills
- * Experience with Windows and Linux
- * Experience implementing microsegmentation policies at enterprise scale
- * Cloud security experience in Azure, AWS, and/or Google Cloud Platform environments
- * Hands-on experience with Palo Alto Networks and/or Check Point firewall administration, policy management, and traffic analysis
- * Experience using Splunk or similar SIEM and log analytics platforms (e.g., Microsoft Sentinel, QRadar, Elastic, LogRhythm) for security monitoring, troubleshooting, and traffic investigation
- * Familiarity with security tools including SIEM, EDR, vulnerability management, and network visibility platforms
- * Scripting or automation experience using PowerShell, Python, or similar languages
- * Relevant security certifications such as CISSP, CCNP Security, PCNSE, CCSM, Security+, or equivalent
Benefits
- Remote work model; candidates must live in the United States
- Eligible employees have health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, and voluntary plans
- Eligible employees may participate in a 401(k) plan
Company Overview