High Touch Engineer (HTE) / Network Consulting Engineer - SDA, Cisco ISE &

- Security

Position Overview

- Role Title: High Touch Engineer / Senior Network Consulting Engineer - SDA, ISE &
- Network Security
- Work Location: Client Onsite - National Stock Exchange (NSE), Mumbai
- Working Model: Onsite (Rotational Morning/Afternoon shifts; 24x7 readiness with Night shifts during approved Maintenance Windows)
- Experience Level: 5-10 Years

Role Summary We are looking for a skilled Senior Network Consulting Engineer specializing in Cisco Software-Defined Access (SDA), Cisco Identity Services Engine (ISE), and Cisco Next-Generation Firewalls. The candidate will lead deployment, automation, identity policy optimization, and network security operations for NSE's multi-site infrastructure.

Key Responsibilities

- SDA Fabric &
- Automation Operations: Manage Cisco Catalyst Center (formerly DNAC), lead automated device onboarding via Plug-and-Play (PnP), deploy CLI templates, and manage fabric provisioning.
- Identity &
- Access Management (Cisco ISE): Design, onboard, and tune ISE authentication/authorization policies, 802.1X integration, Profiling, TACACS+/RADIUS device administration, and Posture frameworks.
- Firewall Operations &
- Optimization: Manage Cisco Secure Firewalls (FTD/FMC and ASA), optimize firewall rule bases, audit NAT policies, and fine-tune High Availability (HA) stateful failover mechanisms.
- Proactive Audits &
- Compliance: Conduct proactive bug scrubs, security posture assessments, vulnerability hardening, and ensure zero deviation from Cisco security baselines.
- Lifecycle &
- RMA Management:



Execute automated software image management (SWIM) via Catalyst Center, lead RMA replacements via SDA workflows, and support night maintenance windows.

Required Technical Skills &

- Expertise

- Cisco Catalyst Center &
- SDA:
- Hands-on fabric management (Border, Control Plane, Intermediate, Edge, Subtended node lan automation & integration).
- Device onboarding via Network Plug and Play (PnP) and configuration templates (Velocity/Jinja2).
- Automated software upgrades (SWIM) and RMA replacement workflows through Catalyst Center.
- Cisco Identity Services Engine (ISE):
- Advanced policy sets for Wired/Wireless 802.1X (EAP-TLS, EAP-MSCHAPv2, PEAP, MAB).
- Endpoint profiling &
- Posture assessment.
- Integration with Microsoft Active Directory, PKI/Certificate Authorities, and MDM.
- Cisco Security / Firewalls:
- Cisco FTD / Firepower Management Center (FMC) &
- Cisco ASA.
- Stateful Active/Standby &
- Active/Active failover optimization, connection limits, and timeout tuning.
- Security policy pruning, access-list optimization, and VPN (IPsec/SSL AnyConnect) troubleshooting.
- Hardware Platforms: Cisco Catalyst 9000 switches (Cat9300, Cat9400, Cat9500, Cat9600), Cisco ISE appliances/VMs, and Cisco Firepower 2100/4100/9300 Series.

Qualifications &

- Certifications

- Education: B.E. / B.Tech / BCA / MCA in Electronics, Computer Science, or related field.
- Certifications: CCNP Security / Enterprise (Required)
- Cisco Certified Specialist - Enterprise SD-Access Implementation or CCIE Security (Strongly Preferred).

Skills: firewalls,security,catalyst,sda,cisco,ise

📌 High Touch Engineer (HTE) / NCE - SDA, Cisco ISE & Security | BFSI DOMAIN (Mumbai)
🏢 Neev
📍 Mumbai