AWS Network Security SME(TESCO)

Zensar Technologies; City of Edinburgh; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading cloud services company in the United Kingdom is seeking a seasoned AWS Network Security Engineer to lead deployment and management of the Cisco Identity Services Engine in their AWS infrastructure. The ideal candidate should have over 5 years of experience in network security, strong familiarity with AWS networking, and proven skills in deploying Cisco ISE. Certifications like AWS Certified Security - Specialty or CCNP Security are preferred. This role offers an exciting opportunity to enhance network security within cloud environments.

Qualifications

• 5+ years of experience in network security engineering, preferably in cloud environments.
• Hands-on experience with AWS networking (VPC, Transit Gateway, VPN, Direct Connect).
• Proven experience deploying and managing Cisco ISE.

Responsibilities

• Architect and deploy Cisco ISE within AWS cloud environments.
• Design secure VPC architectures and configure routing, subnets, and security controls.
• Implement and manage AWS security services (e.g., IAM, Security Groups, NACLs, GuardDuty).

Skills

AWS networking

Cisco Identity Services Engine (ISE)

Network security engineering

Automation and Infrastructure-as-Code (IaC)

Firewalls and VPNs

Education

Bachelor's degree in Computer Science, IT, or related field

Tools

Terraform

Ansible

CloudFormation

Job description

Job Description

AWS Network Security Engineer Role Overview:

We are looking for a seasoned AWS Network Security Engineer to lead the deployment and management of a Cisco Identity Services Engine (ISE) environment within our AWS infrastructure. This role demands deep expertise in cloud-based network security, ISE architecture, and secure integration practices.

Key Responsibilities

• Architect and deploy Cisco ISE within AWS cloud environments.
• Design secure VPC architectures and configure routing, subnets, and security controls.
• Implement and manage AWS security services (e.g., IAM, Security Groups, NACLs, GuardDuty, etc.).
• Integrate ISE with AWS services and on-prem systems for identity and access control.
• Conduct vulnerability assessments and ensure compliance with security standards.
• Automate deployment and configuration using tools like Terraform, Ansible, or CloudFormation.
• Monitor network traffic and logs to detect and respond to security incidents.
• Maintain detailed documentation of network configurations, security policies, and operational procedures.
• Collaborate with infrastructure, application, and security teams to ensure seamless integration.

Required Qualifications

• Bachelor's degree in Computer Science, IT, or related field.
• 5+ years of experience in network security engineering, preferably in cloud environments.
• Hands-on experience with AWS networking (VPC, Transit Gateway, VPN, Direct Connect).
• Proven experience deploying and managing Cisco ISE.
• Strong understanding of TCP/IP, DNS, DHCP, RADIUS, TACACS+, and other network protocols.
• Experience with firewall configurations, VPNs, and endpoint security.
• Familiarity with automation and Infrastructure-as-Code (IaC) tools.

Preferred Certifications

• AWS Certified Security - Specialty
• Cisco Certified Network Professional (CCNP) Security
• Certified Information Systems Security Professional (CISSP)