{"id":2983382,"url":"https://alion.io/job/asimily-technical-architect-segmentation-orchestration-services","title":"Technical Architect, Segmentation Orchestration Services","company":{"id":58446,"name":"Asimily","domain":"asimily.com","url":"https://alion.io/company/asimily","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"B","score":75,"open_postings":4,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Backend","role_family":"Backend","seniority":"staff","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":139000,"max_usd":268000,"period":"year","method":"global_role_seniority_cell","sample_n":2286},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Least Privilege","optional":false},{"name":"Matter","optional":false},{"name":"TCP/IP","optional":false},{"name":"VLAN","optional":false},{"name":"Ansible","optional":true},{"name":"Python","optional":true},{"name":"Rest API","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2024-12-03T00:01:10Z","employer_posted_date":"2026-09-24","last_verified_at":"2026-10-21T19:41:28Z","board_verified":true,"closed_at":null,"days_open":688,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":688},"description":"Technical Architect, Segmentation Orchestration Services\nJob Title\nTechnical Architect, Segmentation Orchestration Services\nLocation\nRemote\nDepartment\nCybersecurity Services\nEmployment Type\nFull Time\nhref=\"https://asimily.com/about-us/careers/job-application/?jobposition=technicalarchitectsegmentationorchestrationservices\"\nstyle=\" border: 2px solid transparent !important;\"\ntarget=\"_self\"\naria-label=\"APPLY NOW\">\nAPPLY NOW\nAbout Asimily\nAsimily is the Proactive Cyber Asset Defense Platform empowering your teams to reduce risk as fast as possible across your entire cyber asset attack surface - IoT, OT, IoMT and IT.\nMost security programs stall between knowing what’s at risk and doing something about it: policies are written but never deployed, segmentation is a priority but never fully implemented, and manual workflows can’t keep pace with dynamic networks. Asimily eliminates every one of those gaps.\nHeadquartered in Sunnyvale, California, Asimily is trusted globally by leading organizations across industries including healthcare, manufacturing, utilities, government, critical infrastructure, and enterprise organizations.\nAbout You\nAsimily is seeking a Technical Architect, Segmentation Services to provide hands-on technical leadership and operationalization support across multiple enterprise customer segmentation implementations. This role unifies deep enterprise routing, switching, and Network Access Control (NAC) design with Asimily’s proprietary device intelligence.\nAs the primary architectural authority, you will own the end-to-end technical lifecycle: discovery, network capability assessments, policy design, pre-production validation, deployment planning, and deep-dive troubleshooting for network based segmentation projects. You will collaborate closely with customer network and security architects, internal Services teams, and Engineering to translate complex IoT, IoMT, and OT intelligence into resilient, least-privilege segmentation policies that align with customer infrastructure, operational feasibility, and service scope.\nSuccess is measured by the ability to independently evaluate complex enterprise networks, architect robust segmentation policies that avoid operational disruption, proactively identify hardware and policy constraints prior to production rollouts, and drive successful project milestones across concurrent customer engagements while cementing trusted technical partnerships.\nEssential Responsibilities\nNetwork Assessment & Technical Discovery\nLead architectural discovery sessions with customer network and security teams to map routing topologies, switching fabrics, firewalls, and existing access controls.\nAudit switch platforms, OS/firmware versions, TCAM/memory capacity, and hardware-level ACL limits to identify enforcement bottlenecks and define feasible deployment options.\nAuthor comprehensive assessment deliverables outlining topology findings, technical constraints, deployment prerequisites, and recommended segmentation architectures.\nNAC Architecture & Segmentation Policy Implementation\nServe as the technical Subject Matter Expert (SME) across enterprise NAC solutions, including Cisco ISE, Extreme Site Engine, Forescout, and Aruba ClearPass.\nIngest Asimily asset intelligence and packet-level flow data to profile legitimate communications and build context-aware, least-privilege policies using the Asimily Segmentation Orchestration. \nDesign and refine downloadable ACLs (dACLs), dynamic VLAN assignment, and role-based access controls (e.g., Cisco TrustSec / SGTs) matched to client hardware capabilities.\nPartner with Asimily Engineering to address platform integration nuances and optimize policy-generation mechanisms.\nDeployment Architecture, Governance & Remediation\nLead technical sequencing, change-control reviews, pre-flight staging, and rollback strategies across parallel customer deployments.\nCoordinate scheduled deployment windows, oversee pre-/post-change validation, and support configuration changes on customer environments within contracted scope boundaries.\nSpearhead escalation-level root-cause analysis (RCA) for policy enforcement anomalies, dynamic authorization failures, and transient connectivity drops.\nMentor Services engineers, driving knowledge transfer and establishing standardized implementation playbooks.\nTraffic Analysis, Documentation & Cross-Functional Leadership\nLead technical presentations with customer enterprise architects and security directors, clearly conveying technical findings, risks, and architectural trade-offs.\nMaintain accurate technical records, policy specifications, validation runs, exception registries, and runbooks.\nCollaborate across distributed customer engineering teams and internal cross-functional groups.\nRequired Qualifications\n5-8+ years of hands-on enterprise networking, network security, or infrastructure engineering experience with a primary focus on access enforcement and segmentation.\nProduction NAC Expertise: Substantial hands-on experience designing, deploying, and troubleshooting at least one enterprise NAC platform: Cisco ISE, Extreme Site Engine, Forescout, or Aruba ClearPass.\nAdvanced Protocol Knowledge: Deep understanding of TCP/IP, switching, dynamic routing, VLAN architectures, subnetting, 802.1X, RADIUS, MAB, and CoA mechanics.\nHardware Enforcement Literacy: Demonstrated capability to evaluate switch platform limitations, memory/TCAM capacity, and hardware ACL scalability.\nPacket-Level Diagnostics: Experience analyzing flow telemetry (NetFlow/sFlow), SPAN/mirror sessions, OR packet captures to isolate complex connectivity or enforcement issues.\nImplementation Ownership: Proven track record leading technical change windows, risk assessments, and rollback planning across complex enterprise environments.\nCommunication & Documentation: Excellent stakeholder-facing communication, technical documentation, and cross-functional problem-solving skills.\nPreferred Qualifications\nCertifications: CCNP, CCIE, or equivalent advanced enterprise networking/security credentials.\nMulti-Vendor Environments: Practical experience managing heterogeneous networks (e.g., mixed Cisco, Extreme, or Aruba environments).\nIdentity-Based Segmentation: Experience deploying large-scale micro-segmentation, Cisco TrustSec (SGTs), or Zero Trust network architectures.\nAutomation & Scripting: Hands-on exposure to Python, Ansible, or REST APIs for switch configuration validation and workflow automation.","description_format":"text","description_chars":6471,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["IoT Security","Vulnerability Management"],"lifecycle":[{"event":"open","at":"2026-10-21T08:02:02Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":3,"green_card_filings_12m":0,"median_offered_wage_usd":182500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":0}],"liveness":{"score":7,"band":"cold","label":"Long shot","p_open":1,"p_active":0.245,"p_room":0.28,"age_days":688,"expected_fill_days":42,"reasons":["conf:4","win:tail","crowd:"],"computed_at":"2026-10-22T00:38:18Z"},"pay":null,"html_url":"https://alion.io/job/asimily-technical-architect-segmentation-orchestration-services","json_url":"https://alion.io/job/asimily-technical-architect-segmentation-orchestration-services.json","meta":{"generated_at":"2026-10-22T00:38:18Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":964,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58446},"rest":"https://alion.io/mcp/rest/get_company?id=58446"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fasimily-technical-architect-segmentation-orchestration-services"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fasimily-technical-architect-segmentation-orchestration-services"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fasimily-technical-architect-segmentation-orchestration-services"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/asimily-technical-architect-segmentation-orchestration-services\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fasimily-technical-architect-segmentation-orchestration-services"}]}