Description

You will design, deploy, and maintain Cisco ISE for network access control and identity-based policy enforcement. You will also configure and manage enterprise firewalls to enforce security boundaries.

Responsibilities

• Implement 802.1X, MAB, and posture assessment for wired and wireless networks using Cisco ISE.
• Configure and troubleshoot Cisco ASA, Firepower, Palo Alto, or Fortinet firewalls, including ACLs, NAT, and VPNs.
• Integrate ISE with Active Directory, PKI, and other authentication systems for certificate-based access.
• Monitor logs to detect anomalies, perform root cause analysis, and execute incident response for security events.
• Maintain network documentation, diagrams, and standard operating procedures for lifecycle management.

Required Skills

• 5+ years of experience in network security engineering.
• Hands-on expertise with Cisco ISE (2.x or 3.x) deployment, policy development, and troubleshooting.
• Strong understanding of RADIUS, TACACS+, EAP, 802.1X, VLANs, and network access control.
• Proficiency with next-generation firewalls (Cisco ASA, Firepower, Palo Alto, or Fortinet).
• Experience with Cisco Catalyst switches, wireless controllers, and VPN technologies.
• Familiarity with Python and Ansible for network automation and configuration.

Preferred Skills

• Understanding of Zero Trust Network Access (ZTNA) and SASE architectures.

Key Skills

Education

Bachelor’s degree