Information Security Engineer

Information Security Engineer - Zero Trust & Micro-Segmentation

Locations: Irving, TX (Las Colinas - preferred), Brevard, NC; Charlotte, NC; Chandler, AZ
Employment Type: Contract (no conversion)

About the Role

We are looking for a Security Engineer to help advance our enterprise Zero Trust strategy through large-scale micro-segmentation. In this role, you will design, implement, and operate segmentation controls across hybrid environments, ensuring secure, reliable, and scalable enforcement of least-privilege access.

You will work cross-functionally with engineering, operations, and vendor teams to strengthen network security posture, improve visibility, and reduce lateral movement risk. This role requires both technical depth and the ability to influence stakeholders across the organization.

Responsibilities

• Design, implement, and manage micro-segmentation policies that enforce least-privilege communication across workloads
• Operate and enhance the Illumio SaaS platform, including VEN agent lifecycle management across Windows, Linux, and emerging platforms
• Analyze network traffic telemetry using SIEM tools to validate policy effectiveness, detect anomalies, and ensure platform health
• Lead incident response efforts related to segmentation, and coordinate with vendor engineering teams during escalations
• Partner with network, infrastructure, and application teams to plan and execute production changes safely
• Develop and maintain security standards, baselines, and governance frameworks aligned to compliance requirements
• Support onboarding, migration, and rollout efforts for segmentation across critical and high-risk applications
• Translate technical findings into clear insights for both engineering teams and executive stakeholders

Minimum Qualifications

• Bachelor's degree or equivalent practical experience
• 4+ years of experience in Information Security Engineering or related field
• Experience with network security concepts, including firewalls, routing, and segmentation
• Hands-on experience with Linux and/or Windows server environments
• Experience with SIEM tools and telemetry analysis
• Strong communication skills with the ability to explain technical concepts to varied audiences

Preferred Qualifications

• Experience with micro-segmentation and Zero Trust architectures
• Hands-on experience with Illumio or a similar segmentation platform
• Experience implementing workload-level segmentation and preventing lateral movement
• Familiarity with traffic analysis, baselining, and event pipeline troubleshooting
• Experience in incident response and production change management
• Knowledge of cloud environments (e.g., Azure) and identity/access management concepts
• Experience integrating security telemetry into SIEM, data platforms, or automation pipelines
• Relevant certifications (e.g., CISSP, CCSP, or Zero Trust/micro-segmentation certifications)

Key Skills

• Micro-segmentation & Zero Trust architecture
• Network security and traffic flow analysis
• SIEM tools and telemetry pipelines
• Illumio or equivalent platforms (VEN agents, SaaS policy engines)
• Python (basic to intermediate)
• API testing (Postman)
• ServiceNow, JIRA, Confluence
• Server and networking fundamentals

What Success Looks Like

• Reliable and scalable deployment of segmentation policies across hybrid environments
• Strong visibility into application traffic and reduced lateral movement risk
• High confidence in enforcement decisions backed by telemetry and validation
• Effective collaboration with cross-functional teams and vendor partners
• Clear communication of risk, impact, and recommendations at all levels of the organization