Network Security Engineer
smart it frameBaltimore, MD
Network Security Engineer
L6
Occupations
Network and Computer Systems AdministratorsComputer Systems Engineers/ArchitectsInformation Security EngineersNetwork Security Engineer - Senior Cisco Identity Services Engine (ISE) Engineer
Location: Washington, DC (Onsite)
Type:
Full-Time Required Experience10–15 years of Network/Security Engineering experience. Strong hands-on experience with Cisco ISE 3.x in large enterprise environments. Experience with Cisco ISE upgrades, patching, troubleshooting, administration, and multi-node deployments. Strong knowledge of 802.1X, RADIUS, EAP/EAP-TLS, NAC, AAA, Authentication & Authorization Policies. Experience with Active Directory integration, Security Groups, and Identity Sources. Strong understanding of PKI and Certificate Management, including server certificates, CA chains, certificate renewals, thumbprints, and certificate-based authentication. Experience with Cisco ISE vulnerability remediation, security patching, and production support. Hands-on experience with packet captures, ISE logs, authentication troubleshooting, and root cause analysis. Experience integrating Cisco ISE with:
Cisco Catalyst:
- MerakiFirewallsF5DNSSplunk/SIEM platforms ServiceNow & Change Management
- Experience creating and managing ServiceNow Change Requests.
- Ability to write implementation, validation, rollback, and risk assessment plans.
- Experience executing:
- ISE upgrades and patching
- Certificate renewalsDNS changes
- Policy updates
- Security group changes
- New integrations
- Infrastructure migrations Incident & Support Experience
- Strong troubleshooting experience across: Endpoint → Switch/AP → ISE → Active Directory → Authorization Policy → Network Access
- Experience with major incidents, RCA, and Cisco TAC case management.
- Ability to diagnose authentication, authorization, certificate, and connectivity issues. Infrastructure & Automation
- Experience with:
- Cisco ISE migrations and node deployments
- High Availability (HA) environments
- Splunk monitoring and alerting
- ServiceNow integrations
- Preferred experience with:
Python
AnsibleTerraformREST APIsCI/CD Automation Preferred QualificationsCCNP Enterprise / CCNP Security or equivalent.
Experience with Cisco Catalyst, Meraki, Enterprise Wireless, Active Directory, PKI, Splunk, and ServiceNow.
Experience in highly regulated enterprise environments.
Apply now (opens in a new tab)
Level
LeadL6
Location
Baltimore, MD
Occupation
Network and Computer Systems Administrators
Industry
Computer Systems Design Services
Posted
today
To get sharper similar jobs, create your profile using the link below.