L3 Network Security Engineer

Job Summary

We are seeking a highly skilled Network Security Engineer with strong experience in LAN & WAN Security with Cisco Identity Services Engine (ISE), and DDI Infoblox’s. The ideal candidate will be responsible for designing, implementing, managing, and troubleshooting secure and efficient enterprise networks while ensuring compliance with security policies.

Key Responsibilities:

DDI Infoblox

o Deploy, configure, and manage Infoblox DDI solutions (DNS, DHCP, IPAM).

o Troubleshoot advanced DNS/DHCP/GRID issues and ensure service availability.

o Implement security features (DNS Firewall, RPZ, Threat Protection).

o Perform IPAM administration, capacity planning, and integration with network tools.

o Handle L3 escalations, root cause analysis, and automation tasks.

o Collaborate with network/security teams for DDI design and policy enforcement.

• Cisco ISE-NAC

o Network Access Control (Cisco-ISE)

o Deploy, configure, and manage Cisco ISE for NAC solutions.

o Implement authentication/authorization policies (802.1x, MAB, posture).

o Troubleshoot complex ISE, RADIUS, TACACS+ issues.

o Integrate ISE with AD, PKI, Firewalls, WLC, and switches.

o Support network access security, profiling, BYOD, guest access.

o Handle escalations and perform root cause analysis.

• Security Compliance & Incident Response

o Closure of vulnerability and security audits in sync with security Team.

o Respond to and investigate network security incidents.

o Ensure compliance with security frameworks and regulatory requirements.

• Collaboration & Documentation

o Work closely with infrastructure, security, and application teams to deliver secure network solutions.

o Create and maintain technical documentation, network diagrams, and standard operating procedures.

Technical Expertise in:

• Cisco ISE: Policy configuration, profiling, BYOD, posture validation.

• Strong knowledge of NAC design, policies, and troubleshooting.

• Expertise in AAA, 802.1x, certificates, TrustSec/SXP.

• Strong expertise in DNS, DHCP, IPAM, and GRID architecture.

• Knowledge of DNSSEC, IPv6, Anycast, and redundancy models.

• Minimum 10-15 years of enterprise network on 7+ years of hands-on experience in enterprise network security and managing team

• Relevant certifications preferred:

o Cisco: Infoblox NIOS certifications / CCNP / equivalent preferred

o CCNP Security

• Excellent troubleshooting and problem-solving skills.

• Strong written and verbal communication abilities.

Preferred Qualifications:

• Bachelor's Degree in Computer Science, IT, or equivalent field.

• Experience with network automation (Python, Ansible).

Interested applicants may drop their CVs at raspl.hr@raspl.com