Consulting Engineer - Security

Cisco; Gurugram District; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Cisco within India is seeking a senior Network Consulting Security Engineer to translate business requirements into robust security solutions. You will design, implement, and manage enterprise-grade Cisco security deployments with a focus on ISE NAC, VPN, and firewall technologies.

You will lead architecture and consulting efforts, deliver design documents, migration plans, test plans, and best-practice recommendations while collaborating with customers and cross-functional teams to drive

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field and 8–10 years of experience in network and security engineering.
• Active professional certifications such as CCNP Security, CCIE Security or CCIE Enterprise or CCIE Data Center are highly preferred.
• Other valuable certifications include ITIL Foundational, CISSP, Palo Alto PCNSE, or CompTIA Security+.
• Expert-level knowledge of Cisco routing and switching technologies and protocols (BGP, OSPF, EIGRP, MPLS, VLANs, STP).
• Strong understanding of security principles, including IDS/IPS, VPN (IPsec, SSL), encryption protocols, and endpoint security.
• Experience with network monitoring, packet capture analysis (e.g., Wireshark, tcpdump), and SIEM tools.

Responsibilities

• Architect, design, deploy, and manage enterprise-level Cisco security solutions, including firewalls, web and email security, VPNs, access control.
• Conduct thorough network security assessments, vulnerability analysis, to identify weaknesses and propose solutions.
• Configure, administer, and optimize Cisco Secure Firewall ASA and Firepower (FTD) firewalls, including FMC, for perimeter defense, data center segmentation, VPN enforcement, and secure segmentation.
• Implement and maintain robust security protocols and measures, including ACLs, NAT, IDS, and IPS.
• Develop, document, and enforce network security policies, procedures, and standards in compliance with industry best practices and regulatory requirements (e.g., NIST, PCI, DoD STIGs).
• Deploy and manage Network Access Control (NAC) solutions, specifically Cisco Identity Services Engine (ISE), for 802.1X authentication, profiling, posture assessments, and policy enforcement across wired, wireless, and data center environments.
• Troubleshoot complex network, security, and data center incidents, performing root cause analysis and implementing corrective measures to restore services swiftly.
• Design, implement, and enforce security policies with Secure Access, including VPN as a Service, Zero Trust Network Access, Secure Web Gateway, Cloud Access Security Broker, Data Loss Prevention, Firewall as a Service with IPS, Cloud Secure Malware Analytics, DNS-layer security, Secure Internet Access, Secure Private Access and Umbrella.

Skills

Network security

Firewall administration

Security policy design

Threat analysis

SIEM

Packet analysis

Education

Bachelor's degree in Computer Science / IT / Engineering

Tools

Cisco Secure Firewall ASA

Cisco Secure Firewall Firepower

FMC (Firepower Management Center)

Wireshark

tcpdump

IDS/IPS

Job description

Meet the Team

The Customer Experience (CX) team is a group of outstanding technical experts to delivering an outstanding customer experience. We tackle the toughest business challenges with network-centric solutions that accelerate customer success and dedication. Our success is reflected in our outstanding financial results, industry recognition, and high employee satisfaction. As the face of Cisco, our CX teams are the primary drivers of digital transformation. Within CX, the Global CX Centers serve as the engine for this transformation, providing flexible, innovative, and highly technical resources to support customer engagements across all theaters. We act as a seamless delivery partner, ensuring our customers achieve their business goals through flawless execution.

Who You Are

We need a team player and natural leader and innovator that can drive improved customer experiences with products, technologies, and solutions by demonstrating Consultative and technical excellence, collaboration, and ownership in all aspects of customer delivery deployments. Focus should be on complex, interdependent, highly visible customer issues that have broad impact. Serve as a cross-functional technical advisor by applying depth and breadth of knowledge to drive customer success.

Your Impact

As a Cisco Network Consulting Security Engineer, you will translate business requirements into technical solutions and design, implement, and manage enterprise security solutions, with a focus on Cisco ISE. You will provide architecture and consulting expertise across customer projects, ensuring alignment with security, compliance, and business objectives. You will lead and guide teams delivering Architecture & Consulting Services, owning key deliverables such as design documents, migration plans, MoPs, test plans, and campus network best-practice recommendations. You will facilitate design workshops, provide customer consultancy, and ensure successful delivery against expectations. You will collaborate with customers, SMEs, project managers, account teams, and Product & Services Sales and Systems/Consulting Engineers to solve complex technology challenges. You will drive process optimization, automation, thought leadership, customer outcomes, and continuous improvement across the practice.

Key Responsibilities

• Architect, design, deploy, and manage enterprise-level Cisco security solutions, including firewalls, web and email security, VPNs, access control.
• Conduct thorough network security assessments, vulnerability analysis, to identify weaknesses and propose solutions.
• Configure, administer, and optimize Cisco Secure Firewall ASA and Firepower (FTD) firewalls, including Secure Firewall Management Center (FMC), for perimeter defense, data center segmentation, VPN enforcement, and secure segmentation.
• Implement and maintain robust security protocols and measures, including Access Control Lists (ACLs), Network Address Translation (NAT), Intrusion Detection Systems (IDS), and Intrusion Prevention Systems (IPS).
• Develop, document, and enforce network security policies, procedures, and standards in compliance with industry best practices and regulatory requirements (e.g., NIST, PCI, DoD STIGs).
• Deploy and manage Network Access Control (NAC) solutions, specifically Cisco Identity Services Engine (ISE), for 802.1X authentication, profiling, posture assessments, and policy enforcement across wired, wireless, and data center environments. Including but not limited to Guest Services, Trustsec, pxGrid and 3rd party integrations.
• Troubleshoot complex network, security, and data center incidents, performing root cause analysis and implementing corrective measures to restore services swiftly and prevent future occurrences.
• Design, implement, and enforce security policies with Secure Access, including but not limited to VPN as a Service, Zero Trust Network Access, Secure Web Gateway, Cloud Access Security Broker, Data Loss Prevention, Firewall as a Service with IPS, Cloud Secure Malware Analytics, DNS-layer security, Secure Internet Access, Secure Private Access and Umbrella.

Minimum Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field & A minimum of 8-10 years of experience in network and security engineering with a strong focus on network security, firewalls and Network Access.
• Active professional/expert-level certifications such asCCNP Security,CCIE Security orCCIE Enterprise or CCIE Data Centerare highly preferred.
• Other valuable certifications include ITIL Foundational, CISSP, Palo Alto PCNSE, or CompTIA Security+.
• Expert-level knowledge of Cisco routing and switching technologies and protocols (BGP, OSPF, EIGRP, MPLS, VLANs, STP).
• Strong understanding of security principles, including IDS/IPS, VPN (IPsec, SSL), encryption protocols, and endpoint security.
• Experience with network monitoring, packet capture analysis (e.g., Wireshark, tcpdump), and SIEM tools.

Preferred Qualifications

• Familiarity with network automation tools, scripting languages such as Python and Ansible, and AI agents is a plus.
• Knowledge of cloud networking concepts and hybrid cloud architectures, including AWS and Azure.
• Ability to lead and mentor security network engineers, provide technical guidance, and foster a culture of continuous learning and professional development.
• Strong problem-solving and analytical skills, with excellent attention to detail.
• Excellent verbal and written communication skills in English, with the ability to explain complex technical concepts to non-technical stakeholders.
• Ability to work both independently and collaboratively in a dynamic, fast-paced environment.
• Strong project management skills, with the ability to manage multiple priorities and drive initiatives effectively.

Why Cisco?

At Cisco, we’re revolutionizing how data and infrastructure connect and protect organizations in the AI era – and beyond. We’ve been innovating fearlessly for 40 years to create solutions that power how humans and technology work together across the physical and digital worlds. These solutions provide customers with unparalleled security, visibility, and insights across the entire digital footprint.

Fueled by the depth and breadth of our technology, we experiment and create meaningful solutions. Add to that our worldwide network of doers and experts, and you’ll see that the opportunities to grow and build are limitless. We work as a team, collaborating with empathy to make really big things happen on a global scale. Because our solutions are everywhere, our impact is everywhere.

We are Cisco, and our power starts with you.