Network and Security Engineer L2

SHI; Hyderabad; On-site; INR 1,500,000 - 2,200,000; Full time

Job summary

SHI is seeking an experienced Network Security Engineer (L2) to manage and support enterprise security infrastructure in Hyderabad. The role focuses on Cisco ISE, firewall operations, SD-WAN, and secure connectivity across the network.

You will implement policies, monitor events, and coordinate with SOC for incident response. The ideal candidate will have hands-on experience with NAC, VPNs, and security best practices in large-scale environments.

Qualifications

• Experience managing Cisco ISE and identity services architecture.
• Proficient in firewall operations and security policy management.
• Hands-on with SD-WAN, VPNs and enterprise security technologies.

Responsibilities

• Administer and support Cisco ISE infrastructure and NAC features.
• Configure 802.1X, RADIUS, TACACS+, guest access, BYOD, and posture checks.
• Design and maintain firewall policies, NAT, VPN, IPS, and URL filtering.
• Manage SD-WAN controls, segmentation policies, and WAN edge devices.
• Monitor security events, support SOC coordination, and incident response.

Skills

Cisco ISE

Firewall Security

SD-WAN

Routing & Switching

Enterprise Network Security

Tools

Cisco ISE

Firewall Administration

SD-WAN

vManage/vSmart/vBond

VPNs/IDS/IPS

Job description

Greetings !!!

We are seeking an experienced Network Security Engineer (L2) with expertise in Cisco ISE, Firewall Security, SD-WAN, Routing & Switching, and Enterprise Network Security Technologies. The candidate will be responsible for managing and supporting network security infrastructure, identity and access management solutions, firewall operations, and secure connectivity across enterprise environments.

Key Responsibilities

Cisco ISE & NAC

• Administer and support Cisco Identity Services Engine (ISE) infrastructure.
• Configure and troubleshoot 802.1X, MAB, RADIUS, TACACS+, Guest Access, BYOD, and Posture Assessment.
• Implement TrustSec, Security Group Tags (SGT), Dynamic Authorization, and Role-Based Access Controls.
• Integrate Cisco ISE with Active Directory, LDAP, PKI, VPNs, Wireless Controllers, and security tools.
• Perform upgrades, patching, backups, and health monitoring of Cisco ISE environments.

Firewall Administration

• Manage, configure, and troubleshoot enterprise firewall environments.
• Create, modify, review, and optimize firewall security policies.
• Implement and maintain NAT, VPN, IPS, URL filtering, and application-based security policies.
• Analyze firewall logs and security events for incident investigation and troubleshooting.
• Conduct firewall rule reviews, policy recertification, and security hardening activities.
• Support firewall migration, upgrades, and high-availability deployments.

SD-WAN / SWAN

• Support Cisco SD-WAN (Viptela) infrastructure.
• Troubleshoot WAN connectivity, routing, application performance, and VPN issues.
• Configure and maintain SD-WAN security and segmentation policies.
• Manage vManage, vSmart, vBond Controllers, and WAN Edge devices.

Network Security Operations

• Support day-to-day network security operations and incident management.
• Monitor network security alerts and coordinate with SOC teams.
• Perform root cause analysis for security incidents and outages.
• Participate in change management, implementation, and maintenance activities.

Years of experience:

Current CTC:

Expected CTC:

Notice Period: