Network Security Engineer

Key Responsibilities:

• Manage remote access and site-to-site VPNs (configurations, troubleshooting, auditing).
• Design and implement Cisco ISE solutions (AAA policies, integration with Active Directory/LDAP/CA).
• Serve as SME for Cisco ISE issues (authentication failures, endpoint profiling, capture & analysis).
• Create and enforce network access policies (802.1X, MAB, Guest/BYOD, device posture).
• Maintain and optimize ISE infrastructure (patches, upgrades, capacity planning).
• Integrate ISE with firewalls and SIEM systems for unified security visibility.
• Support compliance and audits (ISO 27001, SAMA, NCA), assist with reporting and best practices.

Mandatory Skills:

• 3+ years in industry; min 2 years in a similar NAC/ISE role.
• Strong knowledge of TCP/IP, DNS, NAT, VPN, SSL/TLS.
• In-depth expertise in AAA protocols: RADIUS & TACACS+.
• Experience with NAC technologies (802.1X, MAB, device profiling).
• Familiarity with log analysis, SIEM tools, and incident handling.
• Basic scripting/automation (Python, Bash) preferred.
• Excellent analytical, problem-solving, and communication skills.

Nice-to-Have:

• Bachelor's degree in network/computer engineering or related field.
• Certifications: Cisco CCNA (required), CCNP preferred.
• Additional certifications in SD-WAN, wireless (Cisco, Aruba).
• Experience with firewalls (Palo Alto, Fortinet, Cisco ASA/FTD), IPS/IDS, secure web gateways.
• On-call availability for after-hours security events.
• Experience coordinating with vendors, audits, vulnerability assessments, pen-tests.