High Touch Engineer (HTE) / Network Consulting Engineer - SDA, Cisco ISE & Security

Position Overview

Role Title: High Touch Engineer / Senior Network Consulting Engineer - SDA, ISE & Network Security

Work Location: Client Onsite - National Stock Exchange (NSE), Mumbai

Working Model: Onsite (Rotational Morning/Afternoon shifts; 24x7 readiness with Night shifts during approved Maintenance Windows)

Experience Level: 5-10 Years

Role Summary

We are looking for a skilled Senior Network Consulting Engineer specializing in Cisco Software-Defined Access (SDA), Cisco Identity Services Engine (ISE), and Cisco Next-Generation Firewalls. The candidate will lead deployment, automation, identity policy optimization, and network security operations for NSE's multi-site infrastructure.

Key Responsibilities

SDA Fabric & Automation Operations: Manage Cisco Catalyst Center (formerly DNAC), lead automated device onboarding via Plug-and-Play (PnP), deploy CLI templates, and manage fabric provisioning.

Identity & Access Management (Cisco ISE): Design, onboard, and tune ISE authentication/authorization policies, 802.1X integration, Profiling, TACACS+/RADIUS device administration, and Posture frameworks.

Firewall Operations & Optimization: Manage Cisco Secure Firewalls (FTD/FMC and ASA), optimize firewall rule bases, audit NAT policies, and fine-tune High Availability (HA) stateful failover mechanisms.

Proactive Audits & Compliance: Conduct proactive bug scrubs, security posture assessments, vulnerability hardening, and ensure zero deviation from Cisco security baselines.





- Lifecycle & RMA Management: Execute automated software image management (SWIM) via Catalyst Center, lead RMA replacements via SDA workflows, and support night maintenance windows.

Required Technical Skills & Expertise

Cisco Catalyst Center & SDA:

Hands-on fabric management (Border, Control Plane, Intermediate, Edge, Subtended node lan automation & integration).

Device onboarding via Network Plug and Play (PnP) and configuration templates (Velocity/Jinja2).

Automated software upgrades (SWIM) and RMA replacement workflows through Catalyst Center.

Cisco Identity Services Engine (ISE):

Advanced policy sets for Wired/Wireless 802.1X (EAP-TLS, EAP-MSCHAPv2, PEAP, MAB).

Endpoint profiling & Posture assessment.

Integration with Microsoft Active Directory, PKI/Certificate Authorities, and MDM.

Cisco Security / Firewalls

Cisco FTD / Firepower Management Center (FMC) & Cisco ASA.

Stateful Active/Standby & Active/Active failover optimization, connection limits, and timeout tuning.

Security policy pruning, access-list optimization, and VPN (IPsec/SSL AnyConnect) troubleshooting.

- Hardware Platforms: Cisco Catalyst 9000 switches (Cat9300, Cat9400, Cat9500, Cat9600), Cisco ISE appliances/VMs, and Cisco Firepower 2100/4100/9300 Series.

Qualifications & Certifications

Education: B.E. / B.Tech / BCA / MCA in Electronics, Computer Science, or related field.

Certifications: CCNP Security / Enterprise (Required); Cisco Certified Specialist - Enterprise SD-Access Implementation or CCIE Security (Strongly Preferred).

📌 High Touch Engineer (HTE) / NCE - SDA, Cisco ISE & Security | BFSI DOMAIN (Mumbai)
🏢 Neev
📍 Mumbai