Network Security Engineer

Job Summary Job Description We are seeking an experienced Network Security Engineer (L2) with expertise in Cisco ISE, Firewall Security, SD-WAN, Routing & Switching, and Enterprise Network Security Technologies . The candidate will be responsible for managing and supporting network security infrastructure, identity and access management solutions, firewall operations, and secure connectivity across enterprise environments.

Key Responsibilities Cisco ISE & NAC

• Administer and support Cisco Identity Services Engine (ISE) infrastructure.
• Configure and troubleshoot 802.1X, MAB, RADIUS, TACACS+, Guest Access, BYOD, and Posture Assessment.
• Implement TrustSec, Security Group Tags (SGT), Dynamic Authorization, and Role-Based Access Controls.
• Integrate Cisco ISE with Active Directory, LDAP, PKI, VPNs, Wireless Controllers, and security tools.
• Perform upgrades, patching, backups, and health monitoring of Cisco ISE environments.

Firewall Administration

• Manage, configure, and troubleshoot enterprise firewall environments.
• Create, modify, review, and optimize firewall security policies.
• Implement and maintain NAT, VPN, IPS, URL filtering, and application-based security policies.
• Analyze firewall logs and security events for incident investigation and troubleshooting.
• Conduct firewall rule reviews, policy recertification, and security hardening activities.
• Support firewall migration, upgrades, and high-availability deployments.

SD-WAN / SWAN

• Support Cisco SD-WAN (Viptela) infrastructure.
• Troubleshoot WAN connectivity, routing, application performance, and VPN issues.
• Configure and maintain SD-WAN security and segmentation policies.
• Manage vManage, vSmart, vBond Controllers, and WAN Edge devices.

Network Security Operations

• Support day-to-day network security operations and incident management.
• Monitor network security alerts and coordinate with SOC teams.
• Perform root cause analysis for security incidents and outages.
• Participate in change management, implementation, and maintenance activities.

Requirements Job Requirements Required Technical Skills Cisco ISE & NAC

• Cisco ISE 2.x / 3.x
• RADIUS
• TACACS+
• 802.1X
• MAB
• TrustSec
• SGT
• dACL
• Endpoint Profiling
• Posture Assessment

Firewall Technologies (Mandatory) Hands-on Experience With One Or More Of

• Palo Alto Firewalls
• Security Policies
• App-ID
• User-ID
• GlobalProtect VPN
• Panorama
• Fortinet FortiGate
• Security Policies
• IPS
• SSL Inspection
• FortiManager
• FortiAnalyzer
• Cisco Firepower
• FMC
• Access Control Policies
• Intrusion Prevention System (IPS)
• Check Point Firewall
• SmartConsole
• Security Policy Management

VPN & Remote Access

• IPSec VPN
• Site-to-Site VPN
• Remote Access VPN
• AnyConnect
• GlobalProtect

SD-WAN Technologies

• Cisco SD-WAN (Viptela)
• vManage
• vSmart
• vBond
• Application Aware Routing
• VPN Segmentation

Routing & Switching

• TCP/IP
• VLANs
• STP
• OSPF
• BGP
• EIGRP
• HSRP
• VRF
• QoS

Identity Services

• Active Directory
• LDAP
• Kerberos
• SAML
• Azure AD / Entra ID
• Multi-Factor Authentication (MFA)

Monitoring & Security Tools

• Splunk
• QRadar
• Microsoft Sentinel
• SolarWinds
• Wireshark
• ThousandEyes

Required Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Telecommunications, or related field.
• 4 to 8 years of experience in Network Security.
• Minimum 3 years of hands-on experience with Cisco ISE.
• Strong experience in Firewall Administration and Troubleshooting.
• Experience supporting enterprise LAN, WAN, Wireless, SD-WAN, and Security environments.
• Excellent troubleshooting skills across Authentication, NAC, Firewall, VPN, and Routing technologies.

Preferred Certifications

• CCNP Security
• Cisco Certified Specialist - Security Identity Management Implementation
• PCNSA / PCNSE (Palo Alto)
• NSE 4 / NSE 5 (Fortinet)
• Check Point CCSA / CCSE
• Cisco SD-WAN Specialist
• CCIE Security (Preferred)

Mandatory Skills

• Cisco ISE
• 802.1X
• RADIUS / TACACS+
• NAC
• Cisco SD-WAN / Viptela
• Firewall Administration (Palo Alto / Fortinet / Cisco Firepower / Check Point)
• VPN Technologies
• Routing & Switching
• Active Directory Integration
• Network Security Operations