Senior Network & Network Security Engineer / SME – Cisco

IDM Groups LLC is seeking a Senior Network & Network Security Engineer / SME to support a large-scale enterprise network environment in Los Angeles, CA. This is an onsite role focused on hands-on Cisco enterprise networking and network security work, including MPLS, Next-Generation Firewalls, and enterprise monitoring and management platforms.

You will help design, implement, and maintain complex network architectures while ensuring reliability, performance, and security. The position also includes operational issue support and documentation through ServiceNow, along with technical knowledge transfer to engineering and operational teams.

Responsibilities

• Design, analyze, optimize, and support complex enterprise network architectures.
• Support network infrastructure integration and interoperability across enterprise platforms.
• Design, implement, troubleshoot, and optimize enterprise MPLS networks.
• Design, implement, and enhance enterprise network security architecture.
• Configure, support, and optimize Cisco enterprise switches, routers, and Next-Generation Firewalls.
• Perform Cisco IOS, firmware, and approved software upgrades across switches, routers, firewalls, and related infrastructure.
• Support and optimize network management and monitoring platforms, including: Cisco Catalyst Center, Cisco Identity Services Engine (ISE), Cisco Secure Firewall Management Center (FMC), ThousandEyes, and Spectrum.
• Support enterprise network access-control technologies, including VPN, Cisco ISE, and local access-control solutions.
• Perform advanced troubleshooting, incident resolution, root-cause analysis, and network performance management.
• Conduct network infrastructure assessments, including power and fiber redundancy for critical core-network equipment.
• Perform system patching, security vulnerability remediation, compliance validation, and certification reporting.
• Respond to and document operational issues through ServiceNow.
• Prepare technical documentation, implementation records, assessments, and reports.
• Provide technical knowledge transfer and training to engineering and operational teams.
• Collaborate with engineering, cybersecurity, operations, and business stakeholders to maintain network reliability, security, and performance.

Requirements

• Minimum 5 years of hands-on experience supporting enterprise network and network-security environments; 7–10 years strongly preferred.
• Strong hands-on experience with Cisco enterprise switching and routing technologies.
• Extensive experience with Cisco Next-Generation Firewalls (NGFW).
• Working knowledge of Cisco Catalyst Center.
• Working knowledge of Cisco Secure Firewall Management Center (FMC).
• Working knowledge of Cisco Identity Services Engine (ISE).
• Experience with enterprise MPLS networking.
• Experience with enterprise network security, VPN, access control, and security architecture.
• Experience performing Cisco IOS and firmware upgrades.
• Strong enterprise network troubleshooting and incident-resolution skills.
• Experience with vulnerability remediation, network patching, and security/compliance activities.
• Strong analytical and problem-solving capabilities.
• Strong technical documentation and communication skills.
• Ability to work effectively with engineering, cybersecurity, operational, and business teams.
• Must be available to work on-site in Los Angeles Monday through Friday.

Technologies

• Cisco enterprise switching and routing technologies
• Cisco Next-Generation Firewalls (NGFW)
• MPLS
• Cisco Catalyst Center
• Cisco Identity Services Engine (ISE)
• Cisco Secure Firewall Management Center (FMC)
• ThousandEyes
• Spectrum
• VPN
• ServiceNow
• Cisco IOS
• Firmware

Certifications

• Cisco Certified Network Professional (CCNP) certification is strongly preferred.
• Candidates without an active CCNP may be considered if they can demonstrate equivalent advanced enterprise networking and network-security experience.

Preferred Qualifications

• Current and active CCNP certification.
• 7–10 years of enterprise networking/network-security experience.
• Experience with ThousandEyes and Spectrum.
• Experience supporting large, highly available enterprise network environments.
• Experience with network-security compliance, cybersecurity best practices, and risk-management processes.
• Experience supporting public-sector organizations or other large-scale enterprise environments.
• Experience with ServiceNow or similar enterprise IT service-management platforms.

Compensation and Location

• Pay: From $75.00 per hour
• Work location: In person
• Location: Los Angeles, CA