Network Architect / Cisco ISE TrustSec SME Lab Resiliency

Work Model: Hybrid 3 days onsite per week

Interview Process: Immediate

We are looking for an experienced Network Architect / Cisco ISE TrustSec SME to support a Lab Resiliency initiative involving Cisco ISE TrustSec, Catalyst switching, Palo Alto firewalls, Cisco DNA Center, wireless infrastructure, micro-segmentation, security zoning, and network resiliency.

Key Responsibilities

- Design and implement Cisco ISE TrustSec using Security Group Tags (SGT) for micro-segmentation.
- Configure Inline Tagging and/or SXP for SGT propagation.
- Configure Cisco Catalyst switches for ISE TrustSec, SGTs and security policies.
- Configure and manage 802.1X and MAB authentication on switches and associated policies within Cisco ISE.
- Deploy and configure Cisco Catalyst 9000 switches.
- Configure routing and switching technologies including OSPF, BGP, VLANs, LACP and QoS.
- Design and validate high-availability network architectures.
- Implement and manage Cisco DNA Center for provisioning and network management.
- Configure and troubleshoot Cisco Wireless APs/WLC, including AP/RF parameters, SSIDs and FlexConnect.
- Design and deploy Palo Alto PA-440 firewalls in Active/Passive HA.
- Configure and validate firewall HA, including synchronization and failover testing.




- Onboard and manage Palo Alto firewalls using Panorama and/or Palo Alto Strata Cloud Manager.
- Enable and configure Palo Alto Core Security Subscriptions.
- Enable IoT Security for device discovery, profiling and risk visibility.
- Implement security zoning for R&D;, Lab/Test, IoT/OT, Shared Services and Internet following least-privilege principles.
- Integrate Palo Alto firewall logs with Splunk SIEM.
- Perform end-to-end testing covering HA, security policies, TrustSec enforcement and logging.
- Troubleshoot complex network, security, wireless and authentication issues.
- Prepare as-built documentation, configuration documents, runbooks and operational handover documentation.
- Provide support for operational transition and knowledge transfer.
- Basic understanding of Silver Peak SD-WAN is desirable.

Preferred Profile We are particularly interested in candidates with robust hands-on experience across:

- Cisco ISE TrustSec and SGT-based micro-segmentation
- Cisco Catalyst 9000 switching
- 802.1X / MAB / ISE policy configuration
- Palo Alto firewall deployment and HA
- Panorama / Strata Cloud Manager
- Cisco DNA Center
- Enterprise wireless networks
- Routing protocols including OSPF and BGP
- Network resiliency, HA testing and troubleshooting

Candidates who can join quickly and are comfortable working 3 days onsite in Pune will be preferred.

📌 Network Architect (Cisco ISE TrustSec SME) Lab Resiliency (Pune)
🏢 Brave Futures
📍 Pune