High Touch Engineer (HTE) / Network Consulting Engineer
- SDA, Cisco ISE & Security Position Overview
• Role Title: High Touch Engineer / Senior Network Consulting Engineer
- SDA, ISE & Network Security
• Work

Location:
Client Onsite
- National Stock Exchange (NSE), Mumbai
• Working Model: Onsite (Rotational Morning/Afternoon shifts; 24x7 readiness with Night shifts during approved Maintenance Windows)
• Experience Level: 5-10 Years Role Summary We are looking for a skilled Senior Network Consulting Engineer specializing in Cisco Software-Defined Access (SDA), Cisco Identity Services Engine (ISE), and Cisco Next-Generation Firewalls. The candidate will lead deployment, automation, identity policy optimization, and network security operations for NSE's multi-site infrastructure.

Key Responsibilities
• SDA Fabric & Automation Operations: Manage Cisco Catalyst Center (formerly DNAC), lead automated device onboarding via Plug-and-Play (PnP), deploy CLI templates, and manage fabric provisioning.
• Identity & Access Management (Cisco ISE): Design, onboard, and tune ISE authentication/authorization policies, 802.1X integration, Profiling, TACACS+/RADIUS device administration, and Posture frameworks.
• Firewall Operations & Optimization: Manage Cisco Secure Firewalls (FTD/FMC and ASA), optimize firewall rule bases, audit NAT policies, and fine-tune High Availability (HA) stateful failover mechanisms.
• Proactive Audits & Compliance: Conduct proactive bug scrubs, security posture assessments, vulnerability hardening, and ensure zero deviation from Cisco security baselines.
• Lifecycle & RMA Management:



Execute automated software image management (SWIM) via Catalyst Center, lead RMA replacements via SDA workflows, and support night maintenance windows. Required Technical Skills & Expertise
• Cisco Catalyst Center & SDA:
• Hands-on fabric management (Border, Control Plane, Intermediate, Edge, Subtended node lan automation & integration).
• Device onboarding via Network Plug and Play (PnP) and configuration templates (Velocity/Jinja2).
• Automated software upgrades (SWIM) and RMA replacement workflows through Catalyst Center.
• Cisco Identity Services Engine (ISE):
• Advanced policy sets for Wired/Wireless 802.1X (EAP-TLS, EAP-MSCHAPv2, PEAP, MAB).
• Endpoint profiling & Posture assessment.
• Integration with Microsoft Active Directory, PKI/Certificate Authorities, and MDM.
• Cisco Security / Firewalls:
• Cisco FTD / Firepower Management Center (FMC) & Cisco ASA.
• Stateful Active/Standby & Active/Active failover optimization, connection limits, and timeout tuning.
• Security policy pruning, access-list optimization, and VPN (IPsec/SSL AnyConnect) troubleshooting.
• Hardware Platforms: Cisco Catalyst 9000 switches (Cat9300, Cat9400, Cat9500, Cat9600), Cisco ISE appliances/VMs, and Cisco Firepower 2100/4100/9300 Series. Qualifications & Certifications
•

Education:
B.
E. / B.
Tech / BCA / MCA in Electronics, Computer Science, or related field.
• Certifications: CCNP Security / Enterprise (Required); Cisco Certified Specialist
- Enterprise SD-Access Implementation or CCIE Security (Strongly Preferred).

Skills:
firewalls,security,catalyst,sda,cisco,ise

📌 High Touch Engineer (Mumbai)
🏢 Neev
📍 Mumbai