Zero Trust Platform Engineer

Booz Allen Hamilton

. Lead the design, deployment, configuration, and optimization of Illumio Core and Illumio Edge across on-premises, virtualized, and cloud environments .

Posted 10/30/2026full-timeUnited StatesMid-LevelSenior💰 $99,000 - $225,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing Illumio solutions for Zero Trust Segmentation, including policy development and integration with security tools. Proficient in managing cloud and on-premises environments while ensuring compliance with regulatory standards.

Highest-signal resume keywords

Illumio Core And Edge DeploymentZero Trust Segmentation PoliciesLinux And Windows Systems ManagementInfrastructure Automation ToolsDoD 8570 IAT Level III Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityCloud SecurityInfrastructure EngineeringTraffic Flow AnalysisPolicy GovernanceApplication Dependency MappingREST APIsScripting (Python, Bash, PowerShell)Virtualization (VMware, Hyper-V)Cloud Environments (AWS, Azure, GCP)

Soft Skills

CollaborationChange ManagementTroubleshooting

Tools & Technologies

SIEMSOARCMDBVulnerability ScannersEnterprise Automation Pipelines

Certifications & Qualifications

Secret ClearanceSecurityXCASP+CCNP SecurityCISACISSPCISSP AssociateGCEDGCIHCCSP

Industry Keywords

Highly Regulated EnvironmentsFinanceHealthcareFederalEnergyNIST 800-207

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformLinuxPythonVMware

About the role

Key responsibilities & impact

Lead the design, deployment, configuration, and optimization of Illumio Core and Illumio Edge across on-premises, virtualized, and cloud environments
Support architecting and implementation of Zero Trust Segmentation policies, including application dependency mapping, labeling frameworks, enforcement boundaries, and zone-based controls
Develop Illumio workflows, runbooks, dashboards, and segmentation models for enterprise workloads and critical applications
Integrate Illumio with SIEM, SOAR, CMDB, C2C, vulnerability scanners, cloud-native controls, and enterprise automation pipelines
Conduct traffic flow analysis using Illumio VEN telemetry and assist in building policy recommendations to reduce attack surface and limit east-west movement
Troubleshoot system performance, VEN installation issues, policy conflicts, and platform health across distributed infrastructure
Partner with application owners to onboard workloads, validate segmentation plans, and support change management processes
Perform lifecycle management, including upgrades, health checks, certificate operations, and policy governance
Collaborate with security architects to align Illumio policy models with broader Zero Trust and NIST 800-207 strategies
Contribute to architectural standards, documentation, and enterprise security playbooks

Requirements

What you’ll need

5+ years of experience in cybersecurity, cloud security, or infrastructure engineering
3+ years of experience with Linux or Windows systems, virtualization including VMware or Hyper-V, and cloud environments including AWS, Azure, or GCP
2+ years of experience developing and deploying solutions for highly regulated mission-critical environments, including finance, healthcare, federal, or energy
1+ years of experience with infrastructure automation tools
1+ years of experience with REST APIs, scripting including Python, Bash, or PowerShell, or automation frameworks
Secret clearance required
Associate’s degree and 5+ years of experience supporting IT projects and activities, Bachelor’s degree and 3+ years of experience supporting IT projects and activities, or Master’s degree and 1+ years of experience supporting IT projects and activities
Ability to obtain a DoD 8570 IAT Level III Certification such as SecurityX, CASP+, CCNP Security, CISA, CISSP, CISSP Associate, GCED, GCIH, or CCSP Certification within 45 days of start date
Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification within 30 days of start date

Benefits

Comp & perks

Health benefits
Life insurance
Disability benefits
Financial benefits
Retirement benefits
Paid leave
Professional development
Tuition assistance
Work-life programs
Dependent care
Recognition awards program