Digital Architecture Senior Consulting Engineer - Network Security

Description

POSITION SUMMARY:

The Network and Security Engineer is responsible for designing, implementing, and supporting secure enterprise network environments, combining hands-on expertise in Cisco security technologies with strong routing and switching skills. This role leads security-focused engagements involving Cisco Secure Firewall/Firepower Threat Defense (FTD), Firepower Management Center (FMC), Cisco Identity Services Engine (ISE), and related network security technologies across enterprise LAN, WAN, wireless, data center, and cloud-connected environments.

In this role, you will support the full engagement lifecycle from discovery and assessment through design, implementation, testing, knowledge transfer, and operational handoff. You will partner with architects, engineers, project managers, sales teams, and managed services personnel to translate business and compliance requirements into scalable technical solutions. You will also contribute to standards development, reusable configurations, automation, incident response readiness, and continuous improvement across Aspire’s security and networking practices.

ESSENTIAL DUTIES AND RESPONSIBILITIES- MAY INCLUDE THE FOLLOWING: OTHER DUTIES MAY BE ASSIGNED.

CORE RESPONSIBILITIES:

• Design, deploy, migrate, and support Cisco Secure Firewall/FTD and FMC, including policies, IPS, NAT, VPN, high availability, upgrades, and reporting.
• Implement and support Cisco ISE for 802.1X, MAB, profiling, guest access, device administration, TrustSec, and policy enforcement.
• Integrate security platforms with Active Directory, PKI, switches, wireless, VPN, endpoint, and logging systems.
• Configure and troubleshoot Cisco routing and switching, including VLANs, STP, EtherChannel, inter-VLAN routing, OSPF, BGP, redundancy, ACLs, and QoS.
• Implement secure segmentation and connectivity across campus, branch, data center, wireless, internet edge, and cloud-connected environments.
• Troubleshoot security and network issues using packet captures, logs, authentication records, routing data, and platform diagnostics.
• Perform security assessments, rule reviews, lifecycle planning, vulnerability remediation, and configuration compliance checks.
• Develop design, implementation and rollback plans, test procedures, as-built documentation, and knowledge-transfer materials; provide escalation support and contribute to delivery standards.

QUALIFICATIONS:

• 3–5 years of hands-on experience delivering enterprise network security or infrastructure consulting solutions.
• Implementation and troubleshooting experience with Cisco Secure Firewall/FTD and FMC, including policies, NAT, VPN, high availability, upgrades, and migrations.
• Experience implementing or supporting Cisco ISE for network access control, authentication, profiling, guest access, or device administration.
• Working knowledge of Cisco routing and switching, including VLANs, STP, EtherChannel, inter-VLAN routing, OSPF, BGP, ACLs, and route troubleshooting.
• Strong understanding of TCP/IP, DNS, DHCP, NAT, PKI, RADIUS, TACACS+, VPN technologies, segmentation, and common enterprise security controls.
• Ability to troubleshoot security and connectivity issues using packet captures, logs, authentication records, routing data, and platform diagnostics.
• Experience developing implementation plans, rollback plans, test procedures, as-built documentation, and client-facing technical deliverables.
• Ability to work independently during implementation windows and communicate risks, dependencies, and status clearly.

PREFERRED QUALIFICATIONS:

• Consulting or professional services experience delivering security projects across campus, branch, data center, wireless, or cloud-connected environments.
• Experience with Cisco Catalyst or Nexus platforms and secure network segmentation.
• Familiarity with Cisco Catalyst Center, pxGrid, SIEM integrations, automation tools, or cloud networking and security.
• Experience with Cisco ASA, Palo Alto Networks, Fortinet, or another enterprise firewall platform.
• Relevant certifications such as CCNP Security, Cisco Certified Specialist in Secure Firewall or Identity Services Engine, CCNA or CCNP Enterprise, CompTIA Security+, CISSP, Palo Alto Networks, or Fortinet.

TECHNICAL COMPETENCIES:

• Security Platforms: Cisco Secure Firewall/FTD, FMC, ISE, ASA, VPN, NAC, segmentation, and policy enforcement.
• Routing and Switching: Cisco Catalyst/Nexus, VLANs, STP, EtherChannel, OSPF, BGP, HSRP/VRRP, ACLs, QoS, and route redistribution fundamentals.
• Operations and Troubleshooting: packet analysis, log review, configuration validation, monitoring, upgrades, incident support, and root-cause analysis.
• Consulting Delivery: discovery, design, implementation planning, change control, documentation, client communication, and knowledge transfer.

Requirements

MINIMUM EDUCATION AND EXPERIENCE:

• At least 3 years designing, implementing, and troubleshooting enterprise security solutions, with practical experience supporting Cisco routing and switching environments.

PREFERRED EDUCATION AND EXPERIENCE:

• More than 3 years delivering enterprise security solutions and secure network infrastructure in a consulting or professional services environment.

OTHER SKILLS AND ABILITIES:

• Security and Network Technical Proficiency
• Structured Troubleshooting and Root-Cause Analysis
• Project Execution and Technical Leadership
• Client-Focused Communication and Consulting
• Technical Documentation and Knowledge Transfer
• Risk Awareness, Change Control, and Operational Discipline
• Adaptability and Continuous Improvement

TRAVEL: Travel to/from client locations will be required. This may involve local tri-state area or occasional over night accommodations.

PHYSICAL DEMANDS: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to sit and talk or hear. The employee frequently is required to stand; walk; and use hands to finger, handle, or feel objects, tools, or controls. The employee is occasionally required to reach with hands and arms. The employee must occasionally lift and/or move up to 50 pounds. Specific vision abilities required by this job involve normal vision.

WORK ENVIRONMENT: The work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

The noise level in the work environment is usually quiet to moderate.