Network Architect (Cisco ISE TrustSec SME) Lab Resiliency

Network Architect / Cisco ISE TrustSec SME Lab Resiliency

Work Model: Hybrid 3 days onsite per week
Interview Process: Immediate

We are looking for an experienced Network Architect / Cisco ISE TrustSec SME to support a Lab Resiliency initiative involving Cisco ISE TrustSec, Catalyst switching, Palo Alto firewalls, Cisco DNA Center, wireless infrastructure, micro-segmentation, security zoning, and network resiliency.

Key Responsibilities

• Design and implement Cisco ISE TrustSec using Security Group Tags (SGT) for micro-segmentation.
• Configure Inline Tagging and/or SXP for SGT propagation.
• Configure Cisco Catalyst switches for ISE TrustSec, SGTs and security policies.
• Configure and manage 802.1X and MAB authentication on switches and associated policies within Cisco ISE.
• Deploy and configure Cisco Catalyst 9000 switches.
• Configure routing and switching technologies including OSPF, BGP, VLANs, LACP and QoS.
• Design and validate high-availability network architectures.
• Implement and manage Cisco DNA Center for provisioning and network management.
• Configure and troubleshoot Cisco Wireless APs/WLC, including AP/RF parameters, SSIDs and FlexConnect.
• Design and deploy Palo Alto PA-440 firewalls in Active/Passive HA.
• Configure and validate firewall HA, including synchronization and failover testing.
• Onboard and manage Palo Alto firewalls using Panorama and/or Palo Alto Strata Cloud Manager.
• Enable and configure Palo Alto Core Security Subscriptions.
• Enable IoT Security for device discovery, profiling and risk visibility.
• Implement security zoning for R&D, Lab/Test, IoT/OT, Shared Services and Internet following least-privilege principles.
• Integrate Palo Alto firewall logs with Splunk SIEM.
• Perform end-to-end testing covering HA, security policies, TrustSec enforcement and logging.
• Troubleshoot complex network, security, wireless and authentication issues.
• Prepare as-built documentation, configuration documents, runbooks and operational handover documentation.
• Provide support for operational transition and knowledge transfer.
• Basic understanding of Silver Peak SD-WAN is desirable.

Preferred Profile

We are particularly interested in candidates with strong hands-on experience across:

• Cisco ISE TrustSec and SGT-based micro-segmentation
• Cisco Catalyst 9000 switching
• 802.1X / MAB / ISE policy configuration
• Palo Alto firewall deployment and HA
• Panorama / Strata Cloud Manager
• Cisco DNA Center
• Enterprise wireless networks
• Routing protocols including OSPF and BGP
• Network resiliency, HA testing and troubleshooting

Candidates who can join quickly and are comfortable working 3 days onsite in Pune will be preferred.