Job Summary We are seeking an experienced Network Security Engineer (L2) with expertise in Cisco ISE, Firewall Security, SD-WAN, Routing & Switching, and Enterprise Network Security Technologies . The candidate will be responsible for managing and supporting network security infrastructure, identity and access management solutions, firewall operations, and secure connectivity across enterprise environments.

Key Responsibilities Cisco ISE & NAC

- Administer and support Cisco Identity Services Engine (ISE) infrastructure.
- Configure and troubleshoot 802.1X, MAB, RADIUS, TACACS+, Guest Access, BYOD, and Posture Assessment.
- Implement TrustSec, Security Group Tags (SGT), Energetic Authorization, and Role-Based Access Controls.
- Integrate Cisco ISE with Active Directory, LDAP, PKI, VPNs, Wireless Controllers, and security tools.
- Perform upgrades, patching, backups, and health monitoring of Cisco ISE environments.

Firewall Administration

- Manage, configure, and troubleshoot enterprise firewall environments.
- Create, modify, review, and optimize firewall security policies.
- Implement and maintain NAT, VPN, IPS, URL filtering, and application-based security policies.
- Analyze firewall logs and security events for incident investigation and troubleshooting.
- Conduct firewall rule reviews, policy recertification, and security hardening activities.
- Support firewall migration, upgrades, and high-availability deployments.

SD-WAN / SWAN

- Support Cisco SD-WAN (Viptela) infrastructure.
- Troubleshoot WAN connectivity, routing, application performance, and VPN issues.
- Configure and maintain SD-WAN security and segmentation policies.
- Manage vManage, vSmart, vBond Controllers, and WAN Edge devices.

Network Security Operations

- Support day-to-day network security operations and incident management.
- Monitor network security alerts and coordinate with SOC teams.
- Perform root cause analysis for security incidents and outages.
- Participate in change management, implementation, and maintenance activities.





Requirements Job Requirements Required Technical Skills Cisco ISE & NAC

- Cisco ISE 2.x / 3.x
- RADIUS
- TACACS+
- 802.1X
- MAB
- TrustSec
- SGT
- dACL
- Endpoint Profiling
- Posture Assessment

Firewall Technologies (Mandatory) Hands-on Experience With One Or More Of

- Palo Alto Firewalls
- Security Policies
- App-ID
- User-ID
- GlobalProtect VPN
- Panorama
- Fortinet FortiGate
- Security Policies
- IPS
- SSL Inspection
- FortiManager
- FortiAnalyzer
- Cisco Firepower
- FMC
- Access Control Policies
- Intrusion Prevention System (IPS)
- Check Point Firewall
- SmartConsole
- Security Policy Management

VPN & Remote Access

- IPSec VPN
- Site-to-Site VPN
- Remote Access VPN
- AnyConnect
- GlobalProtect

SD-WAN Technologies

- Cisco SD-WAN (Viptela)
- vManage
- vSmart
- vBond
- Application Aware Routing
- VPN Segmentation

Routing & Switching

- TCP/IP
- VLANs
- STP
- OSPF
- BGP
- EIGRP
- HSRP
- VRF
- QoS

Identity Services

- Active Directory
- LDAP
- Kerberos
- SAML
- Azure AD / Entra ID
- Multi-Factor Authentication (MFA)

Monitoring & Security Tools

- Splunk
- QRadar
- Microsoft Sentinel
- SolarWinds
- Wireshark
- ThousandEyes

Required Qualifications

- Bachelor's Degree in Computer Science, Information Technology, Telecommunications, or related field.
- 4 to 8 years of experience in Network Security.
- Minimum 3 years of hands-on experience with Cisco ISE.
- Strong experience in Firewall Administration and Troubleshooting.
- Experience supporting enterprise LAN, WAN, Wireless, SD-WAN, and Security environments.
- Excellent troubleshooting skills across Authentication, NAC, Firewall, VPN, and Routing technologies.

Preferred Certifications

- CCNP Security
- Cisco Certified Specialist - Security Identity Management Implementation
- PCNSA / PCNSE (Palo Alto)
- NSE 4 / NSE 5 (Fortinet)
- Check Point CCSA / CCSE
- Cisco SD-WAN Specialist
- CCIE Security (Preferred)

Mandatory Skills

- Cisco ISE
- 802.1X
- RADIUS / TACACS+
- NAC
- Cisco SD-WAN / Viptela
- Firewall Administration (Palo Alto / Fortinet / Cisco Firepower / Check Point)
- VPN Technologies
- Routing & Switching
- Active Directory Integration
- Network Security Operations

📌 Network Security Engineer (Hyderabad)
🏢 SHI Solutions India
📍 Hyderabad