Job Description

BRMi is seeking experienced Network Security Microsegmentation Engineer to help advance our enterprise Zero Trust security strategy. This role will focus on designing, implementing, and supporting microsegmentation controls using Illumio to reduce lateral movement risk and enforce least-privilege access across enterprise workloads.

The successful candidate will have strong network security experience, practical knowledge of network fundamentals, and hands-on exposure to Illumio or similar microsegmentation platforms. This individual will partner closely with application, infrastructure, cybersecurity, and architecture teams to analyze traffic flows, build segmentation policies, troubleshoot connectivity issues, and support secure application communication.

This is a hands-on engineering role suited for someone who understands both the technical depth of network security and the operational discipline required to implement segmentation safely in production

Benefits:• Comprehensive Medical, Dental, and Vision Insurance• Employer-Paid Life Insurance• Employer-Paid Short-Term and Long-Term Disability Insurance• 401(k) • Paid Time Off (PTO) that includes Vacation Leave, Sick Leave, and 11 Paid Holidays• Educational Assistance

Salary: $100K-$122K

**Can be 100% remote in TX, VA, MD, DC, WV or FL**

**High Profile roles will require candidates to fly to customer HQ for in person interview prior to any offer to prevent employment fraud. (expenses paid)**

Click here to learn about BRMi's culture.

Click here to see BRMi’s Glassdoor reviews

Responsibilities

• Design, implement, and maintain microsegmentation policies using Illumio.
• Analyze application communication flows and define dependencies.
• Enforce least-privilege access aligned to Zero Trust principles.
• Deploy segmentation policies across hybrid and on-prem environments.
• Collaborate with application and infrastructure teams.
• Troubleshoot blocked or unexpected traffic.
• Support change management and policy lifecycle operations.
• Document segmentation design and procedures.
• Perform other duties as assigned

Qualifications

• 5+ years experience in network security or cybersecurity engineering.
• Hands-on experience with Illumio.
• Strong understanding of Zero Trust principles.
• Solid networking fundamentals (TCP/IP, DNS, routing, firewalls).
• Experience with firewall policy design and traffic analysis.
• Strong understanding of network security technologies including firewalls, routing, ACLs, traffic analysis, and policy enforcement across on-premises and cloud environments.
• Experience analyzing network traffic and security logs to troubleshoot application connectivity and segmentation-related issues.
• Strong troubleshooting skills.
• Experience with Windows and Linux.

Desired:

• Experience implementing microsegmentation policies at enterprise scale.
• Cloud security experience in Azure, AWS, and/or GCP environments.
• Hands-on experience with Palo Alto Networks and/or Check Point firewall administration, policy management, and traffic analysis.
• Experience using Splunk or similar SIEM and log analytics platforms (e.g., Microsoft Sentinel, QRadar, Elastic, LogRhythm) for security monitoring, troubleshooting, and traffic investigation.
• Familiarity with security tools including SIEM, EDR, vulnerability management, and network visibility platforms.
• Scripting or automation experience using PowerShell, Python, or similar languages.
• Relevant security certifications such as CISSP, CCNP Security, PCNSE, CCSM, Security+, or equivalent.

** BRMi will not sponsor applicants for work visas for this position.**

**This is a W2 opportunity only**

EOE/Minorities/Females/Vet/Disabled

We are an equal opportunity employer that values diversity and commitment at all levels. All individuals, regardless of personal characteristics, are encouraged to apply. Employment policies and decisions on employment and promotion are based on merit, qualifications, performance, and business needs. The decisions and criteria governing the employment relationship with all employees are made in a nondiscriminatory manner, without regard to race, religion, color, national origin, sex, age, marital status, physical or mental disability, medical condition, veteran status, or any other factor determined to be unlawful by federal, state, or local statutes.