High Touch Engineer (HTE) / NCE - SDA, Cisco ISE & Security | BFSI DOMAIN

Neev; Maharashtra; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Neev is seeking a Senior Network Consulting Engineer for NSE Mumbai to lead deployment and automation of SDA, ISE and security operations. The role requires advanced policy design, fabric provisioning, and hands-on management of Cisco FTD/FMC, ASA, and Catalyst Center.

You will optimize 802.1X, NAT rules, and perform proactive audits in a multi-site environment, including night maintenance windows. The ideal candidate has 5–10 years of relevant experience and CCNP Security, with CCIE Security

Qualifications

• 5–10 years of hands-on experience in network security engineering.
• CCNP Security/Enterprise required; CCIE Security strongly preferred.
• Onsite NSE Mumbai, 24x7 readiness with night maintenance windows.

Responsibilities

• Lead deployment and automation for SDA, ISE, and firewalls.
• Design and tune identity and access policies, including 802.1X.
• Perform proactive security audits, vulnerability hardening, and policy pruning.
• Oversee software image management (SWIM) and SDA workflow-based RMA processes.

Skills

Cisco SDA

Catalyst Center

PnP automation

SWIM automation

ISE

802.1X

Firewalls (FTD/FMC/ASA)

Cisco ASA

HA failover tuning

SDA lifecycle

Education

BE/BTech/BCA/MCA in Electronics/CS

CCNP Security / Enterprise

CCIE Security (Preferred)

Tools

Catalyst Center

PnP templates (Velocity/Jinja2)

FMC / Firepower Management Center

Active Directory

PKI/Certificate Authority

MDM integration

ISE appliances/VMs

Cat9000 switches

Job description

High Touch Engineer (HTE) / Network Consulting Engineer - SDA, Cisco ISE & Security

Position Overview

• Role Title: High Touch Engineer / Senior Network Consulting Engineer - SDA, ISE & Network Security
• Work Location: Client Onsite - National Stock Exchange (NSE), Mumbai
• Working Model: Onsite (Rotational Morning/Afternoon shifts; 24x7 readiness with Night shifts during approved Maintenance Windows)
• Experience Level: 5-10 Years

Role Summary

We are looking for a skilled Senior Network Consulting Engineer specializing in Cisco Software-Defined Access (SDA), Cisco Identity Services Engine (ISE), and Cisco Next-Generation Firewalls. The candidate will lead deployment, automation, identity policy optimization, and network security operations for NSE's multi-site infrastructure.

Key Responsibilities

• SDA Fabric & Automation Operations: Manage Cisco Catalyst Center (formerly DNAC), lead automated device onboarding via Plug-and-Play (PnP), deploy CLI templates, and manage fabric provisioning.
• Identity & Access Management (Cisco ISE): Design, onboard, and tune ISE authentication/authorization policies, 802.1X integration, Profiling, TACACS+/RADIUS device administration, and Posture frameworks.
• Firewall Operations & Optimization: Manage Cisco Secure Firewalls (FTD/FMC and ASA), optimize firewall rule bases, audit NAT policies, and fine-tune High Availability (HA) stateful failover mechanisms.
• Proactive Audits & Compliance: Conduct proactive bug scrubs, security posture assessments, vulnerability hardening, and ensure zero deviation from Cisco security baselines.
• Lifecycle & RMA Management: Execute automated software image management (SWIM) via Catalyst Center, lead RMA replacements via SDA workflows, and support night maintenance windows.

Required Technical Skills & Expertise

• Cisco Catalyst Center & SDA:
• Hands-on fabric management (Border, Control Plane, Intermediate, Edge, Subtended node lan automation & integration).
• Device onboarding via Network Plug and Play (PnP) and configuration templates (Velocity/Jinja2).
• Automated software upgrades (SWIM) and RMA replacement workflows through Catalyst Center.
• Cisco Identity Services Engine (ISE):
• Advanced policy sets for Wired/Wireless 802.1X (EAP-TLS, EAP-MSCHAPv2, PEAP, MAB).
• Endpoint profiling & Posture assessment.
• Integration with Microsoft Active Directory, PKI/Certificate Authorities, and MDM.
• Cisco Security / Firewalls:
• Cisco FTD / Firepower Management Center (FMC) & Cisco ASA.
• Stateful Active/Standby & Active/Active failover optimization, connection limits, and timeout tuning.
• Security policy pruning, access-list optimization, and VPN (IPsec/SSL AnyConnect) troubleshooting.
• Hardware Platforms: Cisco Catalyst 9000 switches (Cat9300, Cat9400, Cat9500, Cat9600), Cisco ISE appliances/VMs, and Cisco Firepower 2100/4100/9300 Series.

Qualifications & Certifications

• Education: B.E. / B.Tech / BCA / MCA in Electronics, Computer Science, or related field.
• Certifications: CCNP Security / Enterprise (Required); Cisco Certified Specialist - Enterprise SD-Access Implementation or CCIE Security (Strongly Preferred).