Senior Network Security Engineer (ISE & Access VPN)

Responsible for designing, implementing, managing, troubleshooting, and optimizing enterprise network security environments.
Key Responsibilities
Design, implement, configure, and maintain Cisco ISE infrastructure, including:
802.1X authentication and authorization
RADIUS/TACACS+ integration
Network Access Control (NAC)
Guest access and BYOD solutions
Profiling and posture assessment
Active Directory integration
Policy Sets and authorization policies
Manage and administer Cisco FMC and FTD environments, including:
Firewall policy and access control configuration
NAT and security policies
IPS/IDS and threat protection
Application and URL filtering
VPN configuration and troubleshooting
High Availability (HA) and failover
Security event monitoring and analysis
Software upgrades and lifecycle management
Implement and support SSL VPN / Remote Access VPN solutions, including:
User authentication and authorization
AAA and MFA integration
VPN profiles and group policies
Client configuration and troubleshooting
Remote-access security policies
Troubleshooting connectivity and authentication issues
Perform advanced troubleshooting of network and security incidents across firewalls, VPN, NAC, authentication, and network infrastructure.
Develop and maintain security policies, standards, configuration documentation, network diagrams, and operational procedures.
Monitor security infrastructure performance and proactively identify and resolve potential issues.
Work closely with network, systems, cloud, and security teams to implement secure enterprise solutions.
Participate in security projects, infrastructure upgrades, migrations, and technology refresh activities.
Perform root-cause analysis for complex incidents and provide permanent remediation.
Ensure security infrastructure complies with organizational security standards and industry best practices.
Required Technical Skills
Cisco ISE: Advanced hands-on experience with NAC, 802.1X, RADIUS, TACACS+, profiling, guest access, BYOD, posture, and AD integration.
Cisco FMC: Advanced experience in centralized firewall management, policy administration, monitoring, reporting, and troubleshooting.
Cisco FTD: Strong experience with firewall configuration, NAT, ACL/Access Control Policies, IPS, application control, URL filtering, VPN, HA, and troubleshooting.
SSL VPN: Extensive experience implementing and troubleshooting enterprise remote-access VPN solutions.
Strong understanding of TCP/IP, DNS, DHCP, routing, switching, VLANs, and network security concepts.
Experience with Active Directory, AAA, MFA, RADIUS, TACACS+, LDAP, and identity-based security.
Experience with network security monitoring, logging, and incident investigation.
Strong troubleshooting skills using packet captures, firewall logs, authentication logs, and network monitoring tools.
Preferred Qualifications
Experience working in large-scale enterprise or data-center environments.
Experience with high-availability and disaster-recovery architectures.
Strong documentation, communication, and problem-solving skills.
Experience Level
6+ years of overall experience in Network/Security Engineering, with significant hands-on experience managing enterprise Cisco ISE, FMC, FTD, and SSL VPN infrastructure.