Network Security Engineer
Job Description
The Network Security Engineer will lead discovery, architecture design, and implementation of Cisco Zero Trust Architecture (ZTA) solutions for multiple clients in a remote W2 role. The position focuses on delivering secure network outcomes, configuring Cisco ZTA components, and supporting customer adoption through documentation, training, and mentoring.
Key Responsibilities
- Lead discovery, architecture design, and implementation of Cisco ZTA solutions for multiple clients across diverse industries and organizational structures.
- Perform comprehensive security assessments and produce tailored ZTA roadmaps aligned with each client’s business objectives, compliance requirements, and budget constraints.
- Manage client relationships and act as the primary technical liaison, ensuring communication of project scope, deliverables, timelines, and expectations.
- Configure, deploy, and validate Cisco ZTA components including SASE, CDO, ISE, Secure Firewall, and DNA Center across customer environments and network topologies.
- Conduct testing, troubleshooting, and optimization across environments with varying complexity, scale, and technical maturity.
- Create comprehensive technical documentation, runbooks, and knowledge transfer materials for customer operations and support teams.
- Provide on-site and remote training for customer technical teams, security staff, and stakeholders on ZTA concepts, best practices, and platform-specific administration.
- Support service delivery excellence by meeting project timelines, budget targets, and quality standards while maintaining high customer satisfaction.
- Mentor junior consultants and architects by sharing technical expertise and project delivery methodologies to strengthen internal capability.
Requirements
- Minimum 5+ years of professional services or consulting experience delivering Cisco network and security solutions to enterprise clients.
- Demonstrated experience leading multiple Zero Trust Architecture (ZTA) design and implementation projects from discovery through completion.
- Strong familiarity with NIST SP 800-207, with the ability to translate its guidance into Cisco ZTA design and implementation decisions.
- Advanced proficiency with Cisco ASA, ISE, Secure Access Service Edge (SASE), Defense Orchestrator (CDO), and Secure Firewall.
- Expertise in network segmentation, microsegmentation, VPN technologies, and identity-based access control architectures.
- Cisco CCNP Security or CCNP Enterprise certification (or equivalent).
- Experience managing client relationships, scoping projects, and delivering against aggressive timelines and budgets.
- Excellent communication and presentation skills for executive and non-technical audiences.
- Ability to troubleshoot complex issues in production environments with minimal escalation.
Technologies
- Cisco ZTA and Cisco ZTA components
- SASE, CDO, ISE, Secure Firewall, DNA Center
- Cisco ASA
- NIST SP 800-207
- VPN technologies
- Cisco CCNP Security and Cisco CCNP Enterprise
- Netskope
- Cisco Secure Access
- Zscaler
Preferred Qualifications
- Cisco CCIE Security certification.
- Experience delivering solutions across multiple customer verticals (financial services, healthcare, manufacturing, government, etc.).
- Expertise with multi-cloud security implementations (AWS, Azure, GCP) and hybrid cloud architectures.
- Experience training customer technical teams and producing comprehensive knowledge transfer documentation.
- Experience with compliance frameworks including PCI-DSS, HIPAA, SOC 2, FedRAMP, NIST SP 800-207, and related Zero Trust guidelines.
- Knowledge of API-driven security automation, orchestration platforms, and Infrastructure-as-Code (IaC).
- Track record of thought leadership through industry events, technical publishing, or contributions to open-source security projects.
Role Details
- Location: Remote
- Employment Type: W2 only (C2C and C2H not considered)
- Compensation: USD 70 to 75 per hour
- Minimum Experience: 5 years
Application Question
Do you have hands-on experience with Cisco Zero Trust combined with at least one of the following platforms: Netskope, Cisco Secure Access, or Zscaler?