Network Engineer - Cisco Security

The Network Engineer - Cisco Security is responsible for designing, implementing, and supporting enterprise network security solutions with a primary focus on Cisco Identity Services Engine (ISE) and Cisco Firepower technologies (FTD & FMC). The role involves managing network access control (NAC), authentication services, firewall policies, VPN solutions, and advanced threat protection to ensure secure and reliable enterprise infrastructure operations. The engineer works closely with network, infrastructure, and security teams to deploy and optimize security controls across wired, wireless, and remote access environments. Key responsibilities include configuring Cisco ISE for authentication, authorization, posture assessment, and device profiling, as well as administering Cisco Firepower firewalls, IPS, AMP, and URL filtering features.

The role also includes monitoring security infrastructure, troubleshooting complex network security issues, performing system upgrades, and responding to security incidents. Additionally, the engineer is responsible for maintaining security documentation, enforcing organizational security standards, and contributing to continuous improvement initiatives to strengthen the company’s overall security posture. The ideal candidate should possess strong hands-on experience with Cisco security technologies, enterprise networking concepts, and security best practices.

Responsibilities:

Cisco ISE (Identity Services Engine) Administration

• Design, deploy, and maintain Cisco ISE solutions for Network Access Control (NAC)
• Configure and manage AAA services using:
• 802.1X
• MAB
• TACACS+

• Manage and support:
• Guest access portals
• BYOD onboarding
• Posture assessment policies

• Integrate Cisco ISE with Active Directory and identity management systems
• Troubleshoot authentication and authorization issues across wired and wireless environments
• Define and enforce access control policies based on user roles, device profiling, and security posture

Cisco Firepower (FTD & FMC) Management

• Manage Cisco Firepower (FTD & FMC) environments
• Firewall policies
• Site-to-site & remote access VPNs
• Monitor security features like IPS, AMP, URL Filtering
• Perform upgrades, patching, and security monitoring

Security Operations

• Monitor and troubleshoot network security issues
• Support incident response and root cause analysis
• Ensure infrastructure availability and compliance

Documentation & Continuous Improvement

• Maintain documentation of security configurations, policies, and operational procedures
• Contribute to the development of network security standards and best practices
• Identify opportunities to improve security posture, operational efficiency, and infrastructure resilience

Requirements:
• Bachelor’s degree in Computer Science, Information Technology, or related field, or equivalent experience
• 3–5+ years of experience in network security or security engineering roles
• Hands-on experience with Cisco ISE and Cisco Firepower (FTD & FMC) technologies
• Experience supporting enterprise-scale network security environments and NAC solutions
• Strong understanding of TCP/IP networking, VLANs, routing, switching, and security architectures
• Experience with VPN technologies, firewall policy management, and security monitoring/log analysis
• Knowledge of enterprise security best practices, access control frameworks, and incident troubleshooting