Network Security Engineer

DMI is hiring a Network Security Engineer for a hybrid role in Pikesville, Maryland (on-premise work required at 1201 Reisterstown Road, Pikesville, MD 21208). This position focuses on migrating and modernizing network security capabilities, assessing identity services, and validating wireless LAN health based on manufacturer recommended best practices.

What you’ll do

• Complete the migration from two (2) pair of Cisco ASA firewalls (high availability) to a Cisco Firepower Threat Defense (FTD) image.
• Combine Cisco ASA and Firepower features into one inclusive hardware and software system.
• Assess an existing Cisco Identity Services Engine (ISE) deployment, including reviewing ISE server topology.
• Review current ISE configuration, logs, integration of infrastructure devices, golden configs, and enhanced authentication.
• Enable TACACS for three (3) admin use cases and create up to three (3) AAA device templates.
• Provide remediation based on findings from the assessment phase.
• Conduct knowledge transfer sessions.
• Perform a wireless health check for the production WLAN, including optimization and remediation recommendations as needed, using manufacturer recommended best practices for WLAN design and deployment.
• Coordinate a closure meeting with the client to review assessment findings.

Required skills and qualifications

• Bachelor’s degree from an accredited college or university in a related field (computer science, information systems, engineering, business, or a related scientific or technical discipline).
• At least 12 years of computer related experience.
• At least 10 years of specialized experience defining computer security requirements for high-level applications, evaluating approved security product capabilities, and security management.
• Cisco Identity Services Engine (ISE) expertise.
• Minimum citizenship status: US Citizen or valid work permit.

Tools and technologies you’ll work with

• Cisco
• Cisco ASA
• Cisco Firepower Threat Defense (FTD)
• Cisco Identity Services Engine (ISE)
• TACACS
• AAA
• Wireless LAN (WLAN)
• WLC/Dashboard

Location: Pikesville, MD (Hybrid)

Compensation: USD 96,086 - 120,108 per year

Work arrangement: Hybrid with option to work remotely, with required on-premise work at 1201 Reisterstown Road, Pikesville, MD 21208