Consulting Engineer - Security

Security Senior Consulting Engineer for Americas Time Zone

• Architect, design, deploy, and manage enterprise-level Cisco security solutions, including firewalls, web and email security, VPNs, access control.
• Conduct thorough network security assessments, vulnerability analysis, to identify weaknesses and propose solutions.
• Configure, administer, and optimize Cisco Secure Firewall ASA and Firepower (FTD) firewalls, including Secure Firewall Management Center (FMC), for perimeter defense, data center segmentation, VPN enforcement, and secure segmentation.
• Implement and maintain robust security protocols and measures, including Access Control Lists (ACLs), Network Address Translation (NAT), Intrusion Detection Systems (IDS), and Intrusion Prevention Systems (IPS).
• Develop, document, and enforce network security policies, procedures, and standards in compliance with industry best practices and regulatory requirements (e.g., NIST, PCI, DoD STIGs).
• Deploy and manage Network Access Control (NAC) solutions, specifically Cisco Identity Services Engine (ISE), for 802.1X authentication, profiling, posture assessments, and policy enforcement across wired, wireless, and data center environments. Including but not limited to Guest Services, Trustsec, pxGrid and 3rd party integrations.
• Troubleshoot complex network, security, and data center incidents, performing root cause analysis and implementing corrective measures to restore services swiftly and prevent future occurrences.
• Design, implement, and enforce security policies with Secure Access, including but not limited to VPN as a Service, Zero Trust Network Access, Secure Web Gateway, Cloud Access Security Broker, Data Loss Prevention, Firewall as a Service with IPS, Cloud Secure Malware Analytics, DNS-layer security, Secure Internet Access, Secure Private Access and Umbrella.

•  Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field & A minimum of 8-10 years of experience in network and security engineering with a strong focus on network security, firewalls and Network Access.
• Active professional/expert-level certifications such as CCNP Security, CCIE Security or CCIE Enterprise or CCIE Data Center are highly preferred.
• Other valuable certifications include ITIL Foundational, CISSP, Palo Alto PCNSE, or CompTIA Security+.
• Expert-level knowledge of Cisco routing and switching technologies and protocols (BGP, OSPF, EIGRP, MPLS, VLANs, STP).
• Strong understanding of security principles, including IDS/IPS, VPN (IPsec, SSL), encryption protocols, and endpoint security.
• Experience with network monitoring, packet capture analysis (e.g., Wireshark, tcpdump), and SIEM tools.

• Must be willing to work in a swing shift to support customers across the Americas (AMER) region

• Familiarity with network automation tools, scripting languages such as Python and Ansible, and AI agents is a plus.
• Knowledge of cloud networking concepts and hybrid cloud architectures, including AWS and Azure.
• Ability to lead and mentor security network engineers, provide technical guidance, and foster a culture of continuous learning and professional development.
• Strong problem-solving and analytical skills, with excellent attention to detail.
• Excellent verbal and written communication skills in English, with the ability to explain complex technical concepts to non-technical stakeholders.
• Ability to work both independently and collaboratively in a dynamic, fast-paced environment.
• Strong project management skills, with the ability to manage multiple priorities and drive initiatives effectively.

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere. 

We are Cisco, and our power starts with you. 

Disclaimer

To ensure that we hire the best talent in the right way, we follow a strict hiring process and recently, Cisco has been made aware of fraudulent recruiters claiming to be from the company. Please be advised that any communication from Cisco about careers will:

• be in direct response to an application you have submitted through the company career site
• begin with screening or an interview
• originate from a Cisco email address, and
• be conducted across email, phone, or WebEx

Cisco will never make a job offer without conducting an interview process or ask you for money in any way. If you have been requested to apply for a role or have received an offer from a site other than https://careers.cisco.com or cisco.wd5.myworkday.com, do not provide any personal identifying information, including your Aadhaar or other personal identifying number, birth certificate, banking information, driver's license, or passport.

If you are the target of a recruiting scam, consider filing a report with your local law enforcement authorities. Cisco bears no responsibility, and cannot be held liable, for any claims, damages, expenses, or other inconvenience resulting from or in any way connected to recruiting scams.