CSS 2 Illumio Subject Matter Expert (Core Expert, Core Specialist)

Overview

The Illumio SME oversees and directs the engineering, implementation, policy configurations and maintenance for the Air Force adopted the Department of Defense (DoD) Zero Trust Architecture (ZTA). Within the AF-ZTA, Illumio products provide micro-segmentation to stop adversary lateral movement. The Illumio SME will direct and participate within an AF team of engineers and operators to produce a real-time network map needs to be created before ZTA can begin. The team will accomplish both a real-time map of the AFNET and eventually the AFNET-S, and then micro-segment the network through ring-fencing workloads or applications to prevent lateral movement. This is accomplished outside of the network architecture, since Illumio is focused on application security. The real time network map and micro-segmentation will enable the Air Force to further accomplish its mission and defend forward.

As a dynamic systems integrator, SMS offers proven solutions in engineering, operations, cybersecurity, and digital transformation. With expertise in modernizing and optimizing legacy infrastructure and systems, ensuring operational efficiency, and designing, implementing, and managing secure environments, SMS supports business and mission goals with proficiency, quality, and integrity.

 

SMS has been serving the advanced information technology needs of the federal government since 1976, delivering talented teams and innovative, cost-effective solutions and services to support our customers’ missions for more than 40 years. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com.

 

Submit your resume today!

Responsibilities

• Install/reinstall/upgrade or advise on the tasks required to place the Illumio Policy Compute Engine software in an approved configuration on both the Air Force NIPR and SIPR networks
• Install/reinstall/upgrade or advise on the tasks required to place the Illumio Virtual Enforcement Node on Air Force servers at any or all locations requested by the Air Force on both the NIPR and SIPR networks
• Provide professional services to perform the above actions, advise on traffic analysis and write security rules for all applications deemed in-scope for this effort
• Provide professional services to manage the project and advise the Air Force management team
• Provide in-person Type 1, over-the-shoulder training and local tier 3 and tier 4 support
• Build Open Virtualization Appliances (OVA)
• The Illumio SME will provide guidance and assistance with any of the following tasks:
  • Provide subject matter expertise on Illumio
  • Deployment, troubleshooting, monitoring, and management of your Illumio deployment and product upgrades
  • Installation and maintenance of the Illumio Policy Compute Engine (PCE)
  • Implementation of integrations such as Syslog/SIEM and Single Sign-On
  • Development of operations procedure/runbook based on Illumio best practices to perform tasks such as PCE rebuild, upgrade, backup/restore, cold standby PCE, etc.
  • Development of Illumio Virtual Enforcement Node (VEN) deployment methodology using the Customer’s automation framework and applying Illumio best practices
  • Assistance in technical reviews and guidance on change preparations
  • Development of a labeling schema using the Customer’s metadata and applying Illumio best practices
  • Authoring Illumio policy based on a customer-defined framework, including core data center services, administrative access, egress traffic, IP lists, and multi-tenant workloads
  • Development of Illumio-specific API scripts to optimize services

Provide reports and metrics, and prepare and maintain project documentation

Qualifications

Requirements

• 4+ years of hands-on experience in network engineering and firewall management
• 4+ years of experience with cloud networking and virtualization technologies (e.g.,VMware)
• Expert skills to install/reinstall/upgrade or advise on the tasks required to place the Illumio Policy Compute Engine and Virtual Enforcement Nodes
• Subject matter expert on Illumio micro-segmentation to provide consulting to customer throughout integration into its service set.
• Expert skills in required to develop Illumio labeling and policy design

 

Education: Bachelor’s degree in related technical discipline, or MIS related field is preferred but not mandatory. 

Required Certifications:

• Illumio Core Expert or Illumio Core Specialst
• IAT Level 2 Certification or higher
• CompTia Network +

Desired Certifications: