Cybersecurity Network Specialist

Network Security EngineerCybersecurity measures are paramount in today's interconnected world. As a Network Security Engineer, you will be responsible for designing and implementing secure network infrastructure that prioritizes reliability, scalability, and the highest level of security.Design, implement, and maintain corporate network infrastructure prioritizing security, reliability, and scalability by utilizing cutting-edge technologies such as intrusion prevention systems (IPS), firewalls, and next-generation VPNs.Lead deployments and architecture design expert in RADIUS/802.1X authentication, EAP-TLS, TrustSec policies, TACACS, and AAA configuration on NADs to ensure seamless and secure connectivity.Oversee and tune guest/sponsor portals, BYOD onboarding, and custom portal solutions for secure and flexible network access, aligning with industry-standard compliance regulations.Plan, document, and execute network upgrades, patch management, gold star release evaluation, and regulatory compliance to minimize downtime and ensure optimal system performance.Integrate network systems with Azure/Intune, Active Directory, and third-party ecosystems for device identity/posture, application access, and security controls, enhancing overall network visibility and control.Manage end-to-end certificate lifecycle for network services, ISE portals, and device authentication (CSR generation, CA signing, binding, backups, expiry management) to prevent unauthorized access and maintain data integrity.Administer TACACS for secure device management and policy-based access to network infrastructure, ensuring efficient incident response and minimizing potential security threats.Automate network management with Python, Ansible, and REST APIs; create workflows with Cisco DNA Center (DNAC); automate inventory sync with CMDB (Freshworks, ServiceNow); and ensure API governance to optimize efficiency and reduce manual intervention.Implement and support SD-Access solutions, including segmentation, policy deployment, and campus fabric operations, providing a scalable and highly available network infrastructure.Troubleshoot complex wireless and wired network issues, conduct log analysis, resolve authentication failures, and optimize LAN/WAN performance to minimize downtime and ensure business continuity.Collaborate in global network deployments, change management, and incident response; manage project documentation; and coordinate across international teams and time zones, fostering effective communication and cooperation.Engage with InfoSec and IT operations for policy compliance, risk mitigation, and collaborative integration projects, ensuring alignment with organizational goals and objectives.Required Skills:Advanced proficiency in Cisco ISE administration, DNA Center, SD-Access, LAN/WAN, wireless networks, and 802.1X protocols, with hands-on experience in network security configurations and best practices.Deep understanding of RADIUS, EAP-TLS, TrustSec, TACACS, AAA policies, and NAD configuration, coupled with strong analytical and problem-solving skills to identify and mitigate potential security risks.Hands-on experience with ISE portals, certificate management, upgrade procedures, regulatory compliance, and security patching, with a focus on maintaining up-to-date knowledge of industry-standard security frameworks and guidelines.Familiarity with ITSM tools (JIRA, Freshworks/Freshservice, ServiceNow) and cloud integration (Azure, AWS), with a proven track record of successfully integrating these tools to enhance network visibility and control.Proven automation skills using Python, Ansible, REST APIs; experience integrating with ITSM tools and cloud platforms; and strong documentation and communication skills to collaborate effectively with cross-functional and global teams.Strong troubleshooting, documentation, and time zone coordination abilities; effective communicator with cross-functional and global teams; and ability to work in a fast-paced environment with competing priorities and deadlines.