Network Engineer - Cisco Security

About the role

The Network Engineer – Cisco Security designs, implements, and supports enterprise network security solutions, focusing on Cisco Identity Services Engine (ISE) and Cisco Firepower technologies. You will work closely with network, infrastructure, and security teams to ensure secure and reliable operations across wired, wireless, and remote environments.

Key responsibilities

• Design, deploy, and maintain Cisco ISE for Network Access Control (NAC) and AAA services (802.1X, MAB, TACACS+).
• Configure and manage guest access portals, BYOD onboarding, and posture assessment policies.
• Integrate ISE with Active Directory and other identity management systems.
• Administer Cisco Firepower (FTD & FMC) firewalls, including policy creation, VPN (site‑to‑site and remote access), IPS, AMP, and URL filtering.
• Perform system upgrades, patching, and continuous security monitoring.
• Monitor, troubleshoot, and resolve complex network security incidents.
• Maintain comprehensive documentation of configurations, policies, and procedures.
• Contribute to the development of security standards and continuous improvement initiatives.

Required profile

• Bachelor's degree in Computer Science, IT, or related field, or equivalent experience.
• 3‑5+ years of experience in network security or security engineering.
• Hands‑on experience with Cisco ISE and Cisco Firepower (FTD & FMC) in enterprise environments.

Required skills

• Cisco Identity Services Engine (ISE)
• Cisco Firepower (FTD & FMC)
• Network Access Control (NAC)
• 802.1X
• MAC Authentication Bypass (MAB)
• TACACS+
• Guest access portals
• BYOD onboarding
• Posture assessment policies
• Active Directory integration
• Site‑to‑site VPN
• Remote access VPN
• Intrusion Prevention System (IPS)
• Advanced Malware Protection (AMP)
• URL Filtering
• Security monitoring
• Incident response