Network & Security Engineer

Vakansiyanın detalları

Design and implement network changes across LAN, WAN, WLAN, SD-WAN, SD-Access and NGFW — including secure branch integrations.
Lead the migration of traditional WAN to Cisco SD-WAN.
Build and enforce security policy on next-gen firewalls (Palo Alto, Fortinet, and/or Cisco).
Manage segmentation, remote-access VPN, and site-to-site IPsec tunnels.
Drive access control and micro-segmentation policy through Cisco ISE.
Act as the escalation point for network security incidents.
Troubleshoot complex, cross-domain issues (Routing / SDA / ISE / Firewalls).
Keep documentation, diagrams and security policies current.

You don't need to be an expert in every technology below. A strong core plus real depth in a couple of areas is exactly what we want.
Solid, hands-on routing & switching: OSPF, BGP, EIGRP, route-maps/PBR, VRF-Lite; STP/RSTP, LACP, VLANs/802.1Q on Cisco Catalyst 9000 (Nexus a plus).
Deep, hands-on experience with at least one leading NGFW platform — Palo Alto (PAN-OS/Panorama), Fortinet (FortiGate/FortiManager), or Cisco Secure Firewall/Firepower (FMC/ASA). Familiarity with the others is a plus.
Real experience with IPsec site-to-site and remote-access VPN (GlobalProtect, FortiClient, or AnyConnect).
Hands-on experience with at least one of Cisco ISE, SD-Access, or SD-WAN in production.
Advanced troubleshooting across intersecting technologies.

Müraciət etmək üçün: [email protected]