We are seeking an experienced Network Engineer with 5+ years of hands on expertise in enterprise network security, with strong proficiency in Cisco Firepower, Cisco ISE, Splunk, and Level 2 networking operations. The ideal candidate will manage and secure the network environment, support security monitoring, and contribute to infrastructure improvements. Experience with ThousandEyes, Cisco Firewalls, Splunk and Meraki solutions is preferred.

Role & Responsibilities :

- Manage, configure, and troubleshoot Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC).

- Administer Cisco Identity Services Engine (ISE) including 802.1X, MAB, profiling, and authorization policies.

- Monitor, analyze, and respond to security events using Splunk dashboards, alerts, and correlation searches.

- Support L2/L3 networking operations including VLANs, STP, routing, ACLs, and VPN troubleshooting.

- Maintain network documentation, diagrams, and operational runbooks.

- Participate in incident response, root cause analysis, and continuous improvement initiatives.

- Support ThousandEyes monitoring, synthetic tests, and network path visibility.

- Assist with Data Center technologies including VXLAN/EVPN on Cisco Nexus platforms.

- Support Meraki MX deployments and dashboard administration.

- Support and develop basic network automation using Python or Ansible.

- 5+ years of experience as a Network or Network Security Engineer.

- Strong hands on experience with Cisco Firepower (FTD/FMC) - policies, NAT, VPN, IPS/IDS.

- Strong experience with Cisco ISE - authentication, authorization, profiling, certificates, and NAC.

- Experience with Splunk - dashboards, alerting, log analysis, and event correlation.

- Strong understanding of L2/L3 networking (VLANs, STP, OSPF/BGP basics, ACLs, DHCP, DNS).

- Experience supporting enterprise firewalls, VPNs, and secure network architectures.

- Familiarity with network monitoring and troubleshooting tools (packet captures, syslogs, SNMP, etc.).

- Understanding of network security best practices and identity based access control.