Illumio Network Security Engineer

Illumio Network Security Engineer
DETAILS
Location: Remote (ideally in CST / MST time zones)
Position Type: 6M Contract
Hourly / Salary: to $130W2+ (based on experience level)

JOB SUMMARY
Vaco is currently seeking an Illumio Network Security Engineer for a 6M Contract opportunity that is remote.  The Illumino Network Security Engineer will support a key client in a large-scale migration from OnPrem VMware to Google Cloud VMware Engine (GCVE). The Illumio Network Security Engineer is directly involved in client-facing and must possess a strong, hands-on doer mentality while simultaneously owning the design, implementation, and operations across data center and Google Cloud Platform cloud environments.

• Network Security Transformation – Migrating from Traditional Firewalls to Illumio Host-Based Micro-Segmentation
• Load Balancer Modernization – Transitioning From NetScaler / Citrix ADC to F5 for Application Delivery
• Cloud Firewall Operations – Supporting Palo Alto Networks Firewalls Deployed within Google Cloud Platform Environments
• Network / Security Architecture – Leading Design / Implementation / Optimization of Enterprise Network / Security Architecture Across OnPrem / Google Cloud Platform Environments
• Micro-Segmentation / Policy Management – Owning Full Lifecycle of Illumio Policy Creation / Maintenance (Allow/Deny Rules / Segmentation Strategy / Testing / Change Management)
• Firewall Engineering – Engineering / Deploying / Supporting Palo Alto Networks Firewalls / Panorama (Security Policy / NAT / VPN / Content Security Services)
• Load Balancing / ADC – Designing / Operating / Troubleshooting F5/NetScaler / Citrix ADC Solutions for Application Delivery
• Cloud Migration / Transformation – Supporting Lift-and-Shift Migration from OnPrem VMware to GCVE (Firewall / Load Balancer Transitions, etc.)
• Network Troubleshooting – Diagnosing Complex L2–L7 Issues | Packet Captures / Logs / Flow Data Across Network / Firewall / Application Layers
• Monitoring / Incident Prevention – Proactively Monitoring Network / Security Platforms to Identify Risks / Performance Issues / Drive Remediation
• Automation / Scripting – Developing Scripts / Tooling to Automate Tasks / Validate Configurations / Remediate Network Issues
• Infrastructure as Code – Contributing to IaC / Automation Efforts Using Terraform and Related Tooling
• Cross-Functional Collaboration – Partnering with Security / Cloud / Application Teams to Translate Requirements into Resilient Network Designs
• Documentation / Knowledge Sharing – Creating / Maintaining Technical Documentation / Runbooks / Architecture Diagrams

 
JOB REQUIREMENTS

• Illumio / Micro-Segmentation – Designing / Implementing Allow/Deny Policies / Micro-Segmentation Strategies / Associated Workflows
• Network Engineering (fundamentals) – Applying Strong Enterprise Routing / Switching Knowledge (BGP / OSPF / VLANs / VRFs / High Availability / QoS)
• Firewall / Security Platforms (deep experience) – Leveraging Palo Alto Firewalls / Panorama in Enterprise Environments
• Load Balancing / ADC – Utilizing F5 / NetScaler / Citrix ADC for L4–L7 Load Balancing / Application Delivery
• Troubleshooting / Problem Solving – Diagnosing Ambiguous / Cross-Domain Issues / Strong Critical Thinking Under Pressure
• Automation / Scripting – Building Repeatable Workflows using Python / PowerShell / Bash and Network / Security APIs
• Infrastructure as Code – Managing Network / Security Infrastructure using Terraform Across OnPrem / Google Cloud Platform
• Network Automation (applying concepts) – Templating / Idempotency / Configuration Validation / Automated Testing
• Google Cloud Platform Networking – Designing / Supporting Google Cloud Platform Networking (VPCs / Subnets / Firewalls / Cloud Router / VPN / Interconnect / Load Balancers / Hybrid Connectivity)
• Communication – Effectively Communicating Technical Designs / Tradeoffs / Troubleshooting Findings Clearly to Technical / Non-Technical Stakeholders

 
PREFERRED (not required)

• Certifications – PCNSE / CCNP / CCIE / F5 / Google Cloud Platform Professional Network Engineer, etc.
• Public Cloud / Modern Networking – Additional Public Clouds / SD-WAN /  Zero Trust Network Architectures

Determining compensation for this role (and others) at Vaco/Highspring depends upon a wide array of factors including but not limited to the individual’s skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law in geographies that require salary range disclosure, Vaco/Highspring notes the salary range for the role is noted in this job posting. The individual may also be eligible for discretionary bonuses, and can participate in medical, dental, and vision benefits as well as the company’s 401(k) retirement plan. Additional disclaimer: Unless otherwise noted in the job description, the position Vaco/Highspring is filing for is occupied. Please note, however, that Vaco/Highspring is regularly asked to provide talent to other organizations. By submitting to this position, you are agreeing to be included in our talent pool for future hiring for similarly qualified positions. Submissions to this position are subject to the use of AI to perform preliminary candidate screenings, focused on ensuring minimum job requirements noted in the position are satisfied. Further assessment of candidates beyond this initial phase within Vaco/Highspring will be otherwise assessed by recruiters and hiring managers. Vaco/Highspring does not have knowledge of the tools used by its clients in making final hiring decisions and cannot opine on their use of AI products.