Senior Network Security Engineer

Job Description

Position: Senior Network Security Engineer

Job Description:

We are looking for a highly experienced and proactive Senior Network Security Engineer with a primary focus on Cisco Identity Services Engine (ISE) administration. The successful candidate will be responsible for deploying and managing a variety of network security solutions to ensure the integrity and security of our infrastructure. This role requires strong project management skills and the ability to work independently.

Core Responsibilities & Duties:Deploy and Administer Cisco ISE ServersLead the deployment, configuration, and administration of Cisco ISE serversEnsure secure network access and enforce policy complianceMonitor system performance and troubleshoot issues as they ariseDeploy Wireless & Wired Dot1xImplement and manage 802.1x authentication for both wireless and wired networksEnsure robust network security through effective authentication mechanismsProvide support and resolve issues related to 802.1x deploymentsManage and Tune IPS/IDSOversee the management and fine-tuning of Intrusion Prevention Systems (IPS) and Intrusion Detection Systems (IDS)Monitor network traffic for potential threats and respond to security incidentsRegularly update IPS/IDS configurations and signaturesCertificate ManagementManage digital certificates to ensure secure communicationsImplement and maintain Public Key Infrastructure (PKI) solutionsEnsure timely renewal and revocation of certificatesFirewall Management (Cisco ASA, MX, Fortigate, Velocloud)Configure, maintain, and troubleshoot firewalls from various vendorsImplement firewall rules and policies to protect network resourcesConduct regular firewall audits and updatesDeploy and Manage Cisco ASA/MX Firewalls in CloudDeploy and manage Cisco ASA/MX firewalls in cloud environmentsEnsure secure and scalable firewall solutions for cloud-based applicationsTroubleshoot and resolve cloud firewall-related issuesRemediate and Identify Firewall VulnerabilitiesIdentify and remediate vulnerabilities in firewall configurationsConduct regular security assessments and penetration testingImplement best practices to enhance firewall securitySolid Knowledge of VPNConfigure and manage Virtual Private Network (VPN) solutions for secure remote accessTroubleshoot VPN connectivity issues and ensure reliable access for remote userImplement and maintain VPN policies and configurationsPerform and Participate in Security AuditsConduct and participate in security audits to ensure compliance with industry standards and regulationsIdentify and address security gaps and vulnerabilitiesPrepare detailed audit reports and recommendations for improvementDeploy and manage Meraki network devices and solutionsEnsure optimal performance and security of Meraki networksTroubleshoot and resolve issues related to Meraki devicesManage and Deploy Cisco Umbrella and Cisco AnyConnectDeploy and manage Cisco Umbrella for DNS-layer securityAdminister Cisco AnyConnect for secure remote accessEnsure seamless integration and optimal performance of these solutionsExcellence in Network Diagram and Documentation CreationCreate and maintain detailed network diagrams and documentationEnsure documentation is up-to-date and accessible to relevant stakeholdersProvide training and support to team members on documented processes and proceduresParticipate in On-Call RotationBe available for on-call support on a rotating basis to address urgent issues outside of regular business hoursRespond promptly to support requests and ensure timely resolution of critical issuesQualifications:

Bachelor's degree in Information Technology, Computer Science, or a related fieldExtensive experience with Cisco ISE administration and network security solutionsStrong project management skills and the ability to work independentlyExceptional communication and presentation skillsProven experience managing and tuning IPS/IDS, certificate management, and firewall administrationExperience with Meraki network devices and solutionsProficiency in creating and maintaining network diagrams and documentationExperience managing and deploying Cisco Umbrella and Cisco AnyConnectSkills:

Certifications in Cisco technologies (e.g., Security CCNA, CCNP, CCIE)Experience with other network security tools and platformsFamiliarity with network infrastructure and security protocols

Forward Air is an Equal Opportunity employer.