Description

You will design, configure, and maintain network security infrastructure, focusing on access control and perimeter defense.

This role is on-site.

Responsibilities

• Design and deploy Cisco ISE for network access control and identity-based policy enforcement.
• Manage firewall policies, ACLs, NAT, and VPNs across Cisco ASA, Firepower, Palo Alto, or Fortinet platforms.
• Implement 802.1X authentication, posture assessment, and manage BYOD policies within ISE.
• Monitor logs from ISE and firewalls to troubleshoot authentication issues and detect security anomalies.
• Perform lifecycle management tasks including patching, backup, and system upgrades for security devices.

Required Skills

• 5+ years of experience in network security engineering.
• Hands-on experience deploying and managing Cisco ISE (2.x or 3.x).
• Strong understanding of RADIUS, TACACS+, EAP, 802.1X, and VLANs.
• Experience configuring and troubleshooting next-generation firewalls (NGFW) or Cisco ASA.
• Proficiency with Cisco Catalyst switches and VPN technologies.
• Familiarity with network monitoring tools like SolarWinds, Splunk, or Wireshark.
• Bachelor's degree in Computer Science, IT, or related field.

Preferred Skills

• Experience with multi-vendor firewall platforms such as Palo Alto or Fortinet.
• Familiarity with automation and scripting using Python or Ansible.
• Knowledge of Zero Trust Network Access (ZTNA) architectures.

Key Skills

Education

Bachelor's degree