Job Description

Roles & Responsibilities

Responsibilities:

Cisco ISE (Identity Services Engine) Administration

• Design, deploy, and maintain Cisco ISE solutions for Network Access Control (NAC)
• Configure and manage AAA services using:
• 802.1X
• MAB
• TACACS+
• Manage and support:
• Guest access portals
• BYOD onboarding
• Posture assessment policies
• Integrate Cisco ISE with Active Directory and identity management systems
• Troubleshoot authentication and authorization issues across wired and wireless environments
• Define and enforce access control policies based on user roles, device profiling, and security posture

Cisco Firepower (FTD & FMC) Management

• Manage Cisco Firepower (FTD & FMC) environments
• Firewall policies
• Site-to-site & remote access VPNs
• Monitor security features like IPS, AMP, URL Filtering
• Perform upgrades, patching, and security monitoring

Security Operations

• Monitor and troubleshoot network security issues
• Support incident response and root cause analysis
• Ensure infrastructure availability and compliance

Documentation & Continuous Improvement

• Maintain documentation of security configurations, policies, and operational procedures
• Contribute to the development of network security standards and best practices
• Identify opportunities to improve security posture, operational efficiency, and infrastructure resilience

Desired Candidate Profile

u>Bachelor s degree in Computer Science, Information Technology, or related field, or equivalent experience /u>

• 3 5+ years of experience in network security or security engineering roles
• Hands-on experience with Cisco ISE and Cisco Firepower (FTD & FMC) technologies
• Experience supporting enterprise-scale network security environments and NAC solutions
• Strong understanding of TCP/IP networking, VLANs, routing, switching, and security architectures
• Experience with VPN technologies, firewall policy management, and security monitoring/log analysis
• Knowledge of enterprise security best practices, access control frameworks, and incident troubleshooting