Illumio Architect

The Illumio Architect is an on-site position located at McConnell AFB, KS. The Air Force has adopted the Department of Defense (DoD) Zero Trust Architecture (ZTA) with its seven pillars. Illumio is providing the ZT micro-segmentation to stop adversary East-West lateral movement and covers the attributes of the Applications/Workloads Pillar. Illumio provides a real-time mapping of applications across the AFNET and allows micro-segmentation by ring-fencing workloads or applications to prevent lateral movement. This is accomplished outside of the network architecture, since Illumio is focused on application security.

The primary role for this position is to support the Illumio capabilities at Langley AFB. The Illumio architect will provide on-site and remote engineering and integration services for the architecture and integration of products to include system architecture, solution design, configuration, testing, implementation, sustainment, performance audits, system reviews, and documentation. Other duties include performing site audits and technical account management such as managing third parties, providing technical assistance, training, and mentoring as directed, as well as providing cybersecurity recommendations in support of ATO within the RMF system.

• Core Tasks
  • Install/reinstall/upgrade or advise on the tasks required to place the Illumio Policy Compute Engine software in an approved configuration on both the Air Force NIPR and SIPR networks
  • Install/reinstall/upgrade or advise on the tasks required to place the Illumio Virtual Enforcement Node on Air Force servers at any or all locations requested by the Air Force on both the NIPR and SIPR networks
  • Provide professional services to perform the above actions, advise on traffic analysis and write security rules for all applications deemed in-scope for this effort
  • Provide professional services to manage the project and advise the Air Force management team
  • Provide in-person Type 1, over-the-shoulder training and local tier 3 and tier 4 support
  • Train and instruct a trainee on the operation and capabilities of Illumio while having the trainee "drive" to get hands on experience with the product.
  • Build Open Virtualization Appliances (OVA)
  • Maintain and sustain the cyber security posture and testing of application upgrades in a lab environment prior to these upgrades/patches being fielded.
  • Assist in maintaining the ITF environment that mirrors, as closely as practical, the deployed system in the field. This ITF environment shall be used for any feature or system testing or for creating or updating the TCTO/TO. It shall be used to test/verify patches, or upgrade applications and ensure the elements of the system are stable and have basic functionality after these changes have been accomplished.
  • Provide ARC Tier 3 support for the Illumio suite
  • Ensure ATO is maintain with regard to STIG updates, including the testing and remediation of all vulnerabilities
• Risk & Compliance Management
  • Ensure compliance with DoD, Air Force, and industry security standards
  • Maintain operational readiness in accordance with procedures and policies
  • Assist in conducting risk assessments and applying mitigation strategies

• Excellent leader with experience in managing staff of different disciplines to produce results in a timely manner.
• Excellent communication skills.
• Excellent problem-solving skills.
• Strong technical knowledge of network and systems infrastructure.
• Ability to work both independently and collaboratively in a mission-critical environment.
• Experience managing subcontractors, vendors, and technical personnel.
• Familiarity with U.S. DoD & U.S. Air Force procedures and the Air Force Information Network (AFIN).

• A degree in a related field and a minimum of six (6) years of relevant experience or a total of at least ten (10) years of relevant experience
• Experience supporting DoD Information Network, AFIN or equivalent.
• Information Assurance (IA) Technician (IAT) Level II Certification
• A valid and current SECRET (or higher) security clearance.

• Illumio Core Expert, Certification
• Network Certification
• 4 years of hands-on experience in network engineering and firewall management
• 4 years of experience with cloud networking and virtualization technologies (e.g., VMware)
• Expert skills to install/reinstall/upgrade or advise on the tasks required to place the Illumio Policy Compute Engine and Virtual Enforcement Nodes
• Subject matter expert on Illumio micro segmentation to provide consulting to customer throughout integration into its service set.
• Expert skills required to develop Illumio labeling and policy design