Job
Description
Lead the deployment of Cisco SD-WAN, Cisco ACI and network segmentation security strategies to enhance security and optimize network performance across multiple sites. Define thesecurity architecture strategyfor the organization, ensuring the network infrastructure is aligned with the latest security standards, compliance frameworks (e.g., NIST, ISO 27001), and business objectives. Architect highly scalable, secure, and high-performanceCisco-based security solutionsfor both on-premises and cloud environments, incorporatingCisco SD-WAN,next-gen firewalls,cloud security, andZero Trustprinciples. Providetechnical leadershipin the integration ofCisco security solutionsinto complex multi-cloud environments, ensuring that security is embedded in all aspects of the network. Define and implement security frameworksto ensure the confidentiality, integrity, and availability of organizational data and assets, using Cisco's security technologies such asCisco ISE (Identity Services Engine)for network access control andCisco Talosfor threat intelligence andSplunk Work closely with other architects, network engineers, and security operations teams to develop a comprehensiveend-to-end network security strategythat includes risk assessments, threat modeling, and secure design patterns. Lead thedeployment of Cisco SD-WANandnetwork segmentationstrategies usingCisco ACIto enhance security and optimize network performance across multiple sites. Advise stakeholders onemerging network security trends, including the integration ofcloud-native securitytechnologies, and ensure that the organization is prepared for the evolving threat landscape. Collaborate with DevOps and cloud teams to incorporate security as part of the CI/CD pipeline and automate security checks at every stage of application delivery. Review and enhance network security policies, ensuring they reflect best practices and are in line with industry standards. Manage thesecurity governanceprocess for the organization's network infrastructure. Mentor and guidejunior architects and network security engineers, sharing knowledge and driving best practices in the architecture and implementation of Cisco network security solutions. Engage with vendors, stakeholders, and third-party partners to evaluate new Cisco technologies and security solutions that can be leveraged to strengthen network defenses. Continuously assess the security posture of network infrastructure, utilizingCisco Stealthwatch,SecureX, and other tools to detect and respond to potential threats. Knowledge of the CISCO AI tools Knowledge of different vulnerability assessments tools. Required education Bachelor's Degree Preferred education Bachelor's Degree Required technical and professional expertise Bachelor's degreein Information Technology, Cybersecurity, Networking, or a related field (or equivalent work experience). 5+ years of experience in network security architecture with a strong focus on Cisco technologies, such as Cisco Secure Firewall (formerly Firepower), Cisco ASA, Cisco Umbrella, Cisco SecureX, Cisco ISE, Cisco Secure Network Analytics (formerly Stealth watch), Cisco Duo Security, Cisco Secure Access by Duo, and Cisco Cloud Security. Proven expertise in designing and implementingnext-gen firewallarchitectures. Strong experience architecting and implementingCisco cloud security solutionsin multi-cloud environments (AWS, Azure, GCP), Cloud Firewalls, IPSec, Load Balancers and other virtual appliances Expertise inZero Trust Architecture (ZTA)and its integration withCisco security solutions. In-depth knowledge ofCisco ACIfor secure network segmentation and application-centric security in data centers. Extensive experience innetwork risk managementand security compliance frameworks (e.g., PCI-DSS, HIPAA, GDPR). Experience working withCisco SecureX,Cisco Talos, and other Cisco tools for threat intelligence and network monitoring. Strongleadershipskills with a proven track record of guiding cross-functional teams and senior leadership on strategic decisions related to network security architecture. Advanced proficiency insecurity automationand orchestration, including usingCisco's automation toolsto improve security operations. Strong understanding ofcloud-native network securityand integrating security into cloud environments. Excellentcommunicationskills and the ability to present complex security concepts to both technical and non-technical stakeholders. Preferred technical and professional experience CCIE SecurityorCCNP Securitycertification (or equivalent). Deep understanding ofCisco MerakiandCisco Talosthreat intelligence platforms. Experience in architectingSecure SD-WANsolutions withCisco ViptelaandCisco Meraki. Familiarity withmicro-segmentationand implementingCisco ACIin a multi-cloud environment. Expertise in securingIoT networksusing Cisco security solutions. Knowledge ofCisco Identity Services Engine (ISE)and its integration into large-scale network security architectures.
