Sr. Cisco Network Engineer
Share
Job Location:
Santa Clara County, CA - USA
Monthly Salary:
Not Disclosed
Posted on:
5 hours ago
Vacancies:
1 Vacancy
Job Summary
JOB TITLE: Sr. Cisco Network Engineer
EMPLOYMENT TYPE/DURATION: 6-month Contract possible extension
LOCATION DETAILS: On-site Santa Clara CA
We are seeking a highly skilled Senior Cisco Network Engineer with deep expertise in Network Access Control (NAC) and Cisco Identity Services Engine (ISE). This role will be responsible for designing implementing optimizing and supporting secure enterprise network infrastructures with a strong emphasis on identity-based access segmentation and compliance.
The ideal candidate is a hands-on technical leader with extensive experience in Cisco enterprise environments zero-trust architecture principles and complex multi-site deployments.
Key Responsibilities
- Design implement and support enterprise-wide Cisco ISE/NAC solutions
- Lead architecture and deployment of secure wired and wireless access controls
- Integrate ISE with:
- Active Directory / LDAP
- PKI and certificate services
- MDM / endpoint compliance platforms
- SIEM / security monitoring tools
- Implement and manage:
- 802.1X authentication (EAP-TLS PEAP)
- Guest access portals
- BYOD workflows
- Posture assessment and remediation
- Deploy and manage Cisco TrustSec and segmentation policies
- Provide advanced troubleshooting for complex authentication and authorization issues
- Perform upgrades patching and lifecycle management of Cisco infrastructure
- Collaborate with security teams to align network access with zero-trust strategy
- Create technical documentation diagrams and operational runbooks
- Provide mentorship to junior network engineers
- Participate in on-call escalation support as needed
Required Qualifications
- 7 years of enterprise network engineering experience
- 3 years of hands-on experience with Cisco ISE/NAC implementations
- Strong expertise in:
- Cisco Catalyst switches
- Cisco wireless LAN controllers
- 802.1X authentication protocols
- RADIUS/TACACS
- VLAN segmentation and policy-based access control
- Experience with:
- Cisco DNA Center
- Cisco TrustSec
- Multi-site ISE deployments
- High availability and distributed node architecture
- Deep understanding of:
- TCP/IP routing (BGP OSPF EIGRP)
- Switching technologies
- Firewall integration
- Strong troubleshooting and packet analysis skills (Wireshark preferred)
Preferred Certifications
- CCNP Enterprise (required or equivalent experience)
- CCIE (preferred)
- Cisco Certified Specialist Security Identity Management
- CISSP (a plus)
Preferred Experience
- Experience in large enterprise or global environments
- Zero-trust architecture implementation
- Cloud integration (Azure/AWS identity integration)
- Experience with Cisco Secure Access or SASE solutions
- Automation/scripting (Python Ansible REST APIs)
Key Skills
- Load Balancing
- Routing Protocols
- Network Administration
- Network Engineering
- BGP
- LAN
- Computer Networking
- IPsec
- OSPF
- Cisco ASA
- Juniper
- MPLS
