Job Summary

We are seeking an experienced Network Security Engineer (L2) with expertise in Cisco ISE, Firewall Security, SD-WAN, Routing &

- Switching, and Enterprise Network Security Technologies. The candidate will be responsible for managing and supporting network security infrastructure, identity and access management solutions, firewall operations, and secure connectivity across enterprise environments.

Key Responsibilities

Cisco ISE &

- NAC

- Administer and support Cisco Identity Services Engine (ISE) infrastructure.
- Configure and troubleshoot 802.1X, MAB, RADIUS, TACACS+, Guest Access, BYOD, and Posture Assessment.
- Implement TrustSec, Security Group Tags (SGT), Agile Authorization, and Role-Based Access Controls.
- Integrate Cisco ISE with Active Directory, LDAP, PKI, VPNs, Wireless Controllers, and security tools.
- Perform upgrades, patching, backups, and health monitoring of Cisco ISE environments.

Firewall Administration

- Manage, configure, and troubleshoot enterprise firewall environments.
- Create, modify, review, and optimize firewall security policies.
- Implement and maintain NAT, VPN, IPS, URL filtering, and application-based security policies.
- Analyze firewall logs and security events for incident investigation and troubleshooting.
- Conduct firewall rule reviews, policy recertification, and security hardening activities.
- Support firewall migration, upgrades, and high-availability deployments.

SD-WAN / SWAN

- Support Cisco SD-WAN (Viptela) infrastructure.
- Troubleshoot WAN connectivity, routing, application performance, and VPN issues.




- Configure and maintain SD-WAN security and segmentation policies.
- Manage vManage, vSmart, vBond Controllers, and WAN Edge devices.

Network Security Operations

- Support day-to-day network security operations and incident management.
- Monitor network security alerts and coordinate with SOC teams.
- Perform root cause analysis for security incidents and outages.
- Participate in change management, implementation, and maintenance activities.

Requirements

Job Requirements

Required Technical Skills Cisco ISE &

- NAC

- Cisco ISE 2.x / 3.x
- RADIUS
- TACACS+
- 802.1X
- MAB
- TrustSec
- SGT
- dACL
- Endpoint Profiling
- Posture Assessment

Firewall Technologies (Mandatory) Hands-on Experience With One Or More Of

- Palo Alto Firewalls
- Security Policies
- App-ID
- User-ID
- GlobalProtect VPN
- Panorama
- Fortinet FortiGate
- Security Policies
- IPS
- SSL Inspection
- FortiManager
- FortiAnalyzer
- Cisco Firepower
- FMC
- Access Control Policies
- Intrusion Prevention System (IPS)
- Check Point Firewall
- SmartConsole
- Security Policy Management

VPN &

- Remote Access

- IPSec VPN
- Site-to-Site VPN
- Remote Access VPN
- AnyConnect
- GlobalProtect





SD-WAN Technologies

- Cisco SD-WAN (Viptela)
- vManage
- vSmart
- vBond
- Application Aware Routing
- VPN Segmentation

Routing &

- Switching

- TCP/IP
- VLANs
- STP
- OSPF
- BGP
- EIGRP
- HSRP
- VRF
- QoS

Identity Services

- Active Directory
- LDAP
- Kerberos
- SAML
- Azure AD / Entra ID
- Multi-Factor Authentication (MFA)

Monitoring &

- Security Tools

- Splunk
- QRadar
- Microsoft Sentinel
- SolarWinds
- Wireshark
- ThousandEyes

Required Qualifications

- Bachelor's Degree in Computer Science, Information Technology, Telecommunications, or related field.
- 4 to 8 years of experience in Network Security.
- Minimum 3 years of hands-on experience with Cisco ISE.
- Strong experience in Firewall Administration and Troubleshooting.
- Experience supporting enterprise LAN, WAN, Wireless, SD-WAN, and Security environments.
- Excellent troubleshooting skills across Authentication, NAC, Firewall, VPN, and Routing technologies.

Preferred Certifications

- CCNP Security
- Cisco Certified Specialist - Security Identity Management Implementation
- PCNSA / PCNSE (Palo Alto)
- NSE 4 / NSE 5 (Fortinet)
- Check Point CCSA / CCSE
- Cisco SD-WAN Specialist
- CCIE Security (Preferred)

Mandatory Skills

- Cisco ISE
- 802.1X
- RADIUS / TACACS+
- NAC
- Cisco SD-WAN / Viptela
- Firewall Administration (Palo Alto / Fortinet / Cisco Firepower / Check Point)
- VPN Technologies
- Routing &
- Switching
- Active Directory Integration
- Network Security Operations

📌 Network Security Engineer (Hyderabad)
🏢 SHI Solutions India
📍 Hyderabad