Security Architect - Illumio

Security Architect - Illumio Job Description & Key Responsibilities Architecture & Design (Strategic Level) Design Segmentation Architecture: Lead the design of micro-segmentation solutions based on Illumio Core (for datacenters and cloud) and Illumio Edge (for endpoints).Zero Trust Strategy: Translate business and regulatory security requirements (e.g., NIS2, DORA, PCI-DSS) into technical security policies within Illumio.Risk & Vulnerability Analysis: Analyze existing network topologies and application dependencies to identify security risks and design optimal protection zones. Implementation & Configuration (Hands-on Level) Deployment & Maintenance: Install, configure, and maintain the Illumio Policy Compute Engine (PCE) across on-premise, cloud, and hybrid environments.Agent Deployment: Package and deploy Illumio Virtual Enforcement Nodes (VENs) on servers (Windows,Policy Authoring & Testing: Create, test, and fine-tune security rules (Rulesets) based on application groupings and labels (Role, Application, Environment, Location).Automation: Integrate Illumio into CI/CD pipelines, Infrastructure as Code (e.g., Terraform, Ansible), and manage policies via Illumio’s REST APIs. Collaboration & Advisory Technical Project Leadership: Act as a bridge between IT security, networking teams, and application owners to ensure segmentation does not disrupt business-critical traffic flows.Training & Knowledge Transfer: Conduct workshops and train the client’s internal teams on how to manage and monitor the Illumio platform post-implementation.Incident Response Integration: Integrate Illumio with the client’s SIEM/SOAR systems (e.g., Splunk, Microsoft Sentinel) for visibility and automated threat response. Technical Profile & Requirements To succeed in this role, a solid background in networking, systems, and security is required. Illumio Expertise: Deep experience with Illumio PCE and VEN.Ideally certified as an Illumio Certified Technical Professional (ICTP) or Illumio Certified Design Professional (ICDP).Network & Security: Strong understanding of network protocols (TCP/IP, DNS, TLS), firewall technologies, routing, and micro-segmentation principles.Operating Systems & Infrastructure: Hands-on experience with Windows Server and Linux (RHEL/Ubuntu) administration. Experience with virtualization (VMware vSphere).Cloud Environments: Hands-on experience securing AWS, Microsoft Azure, or Google Cloud Platform (GCP) environments.Scripting & Automation: Ability to write scripts in PowerShell or Python, and experience working with REST API integrations. Soft Skills & Personal Attributes Analytical & Structured: Ability to understand complex application flows and identify patterns within large volumes of traffic data.Communicative Leader: Capable of explaining complex security concepts to both executive leadership (CISO/CIO) and technical engineers.Self-driven Problem Solver: Comfortable both drawing architecture diagrams and working in the command-line interface (CLI) to troubleshoot why a specific rule is blocking traffic.