SIRO Clinpharm - Network Security Engineer - Cisco Firewalls (3-5 yrs)

Job Responsibilities :

- Design, implement, and maintain a robust network security architecture.

- Configure, monitor, and troubleshoot Cisco Firewalls (Firepower, ASA) to protect network resources.

- Deploy and manage Cisco ISE for network access control and policy enforcement.

- Develop and enforce network security policies and standards.

- Respond to security incidents, investigate root causes, and implement corrective measures.

- Monitor network traffic for threats and implement preventive measures.

- Optimize network performance and resource utilization.

- Work closely with network engineers, security analysts, and other IT teams

Must-Have Skills :

- Degree in Computer Science/Engineering, Information Technology, or a relevant certification.

- In-depth knowledge and hands-on experience with security technologies, including firewalls, intrusion detection systems, VPNs, and access control mechanisms.

- Strong understanding of routing protocols (BGP, OSPF), switching protocols (VLANs, STP), and network security principles (DOT1X, MAB, Port Security).

- Proficiency in Cisco Firewalls (Firepower, ASA), Cisco ISE, and Cisco Campus portfolio.

- Operational knowledge of DNS, DHCP, and IPAM.

- Experience with Cisco FMC and CSM for managing and orchestrating security devices.

- Ability to diagnose and resolve complex network security issues using tools like packet capture and port mirroring.

- Strong documentation skills, including creating detailed procedures and reports.

- Excellent written and verbal communication skills to interact with technical and non-technical stakeholders.

- Ability to collaborate effectively with cross-functional teams.

Nice-to-Have Skills :

- Operational knowledge of SD-WAN and SASE technologies.

- Experience with network automation tools and scripting languages (Python, Ansible).

- Knowledge of Cisco Wireless LAN Controller (WLC) and vWLC.

- Proficiency in network monitoring tools (e., SolarWinds, Nagios).

- CCNP, CCIE, or other relevant certifications.