Microsegmentation Engineer

INSPYR Solutions•Merrifield, VA

About The Position

INSPYR Solutions is seeking a Network Security Microsegmentation Engineer to advance its enterprise Zero Trust security strategy. The role designs, implements, and supports Illumio-based microsegmentation controls to reduce lateral movement risk and enforce least-privilege access across enterprise workloads. The engineer analyzes application traffic flows, defines dependencies, builds and operates segmentation policies, and supports secure application communication across hybrid and on-premises environments. This is a hands-on engineering role requiring network security expertise and careful operational execution in production environments. The engineer partners with application, infrastructure, cybersecurity, and architecture teams to troubleshoot connectivity issues, support change management and policy lifecycle operations, and document segmentation designs and procedures.

Requirements

At least 5 years of experience in network security or cybersecurity engineering.
Hands-on experience with Illumio.
Strong understanding of Zero Trust principles.
Solid networking fundamentals, including TCP/IP, DNS, routing, and firewalls.
Experience with firewall policy design and traffic analysis.
Strong understanding of network security technologies, including firewalls, routing, ACLs, traffic analysis, and policy enforcement across on-premises and cloud environments.
Experience analyzing network traffic and security logs to troubleshoot application connectivity and segmentation-related issues.
Strong troubleshooting skills.
Experience with Windows and Linux.

Nice To Haves

Experience implementing microsegmentation policies at enterprise scale.
Cloud security experience in Azure, AWS, and/or GCP environments.
Hands-on experience with Palo Alto Networks and/or Check Point firewall administration, policy management, and traffic analysis.
Experience using Splunk or similar SIEM and log analytics platforms, such as Microsoft Sentinel, QRadar, Elastic, or LogRhythm, for security monitoring, troubleshooting, and traffic investigation.
Familiarity with security tools including SIEM, EDR, vulnerability management, and network visibility platforms.
Scripting or automation experience using PowerShell, Python, or similar languages.
Relevant security certifications such as CISSP, CCNP Security, PCNSE, CCSM, Security+, or equivalent.

Responsibilities

Design, implement, and maintain microsegmentation policies using Illumio.
Analyze application communication flows and define dependencies.
Enforce least-privilege access aligned with Zero Trust principles.
Deploy segmentation policies across hybrid and on-premises environments.
Collaborate with application and infrastructure teams.
Troubleshoot blocked or unexpected traffic and application connectivity issues.
Support change management and policy lifecycle operations.
Document segmentation designs and procedures.
Support the design, implementation, and operational management of enterprise microsegmentation capabilities.