Network Security Engineer

SHI Solutions India Pvt. Ltd.; Hyderabad; On-site; INR 700,000 - 1,100,000; Full time

Job summary

SHI Solutions India Pvt. Ltd. seeks an experienced Network Security Engineer (L2) to manage and support network security infrastructure across enterprise environments.

The role focuses on Cisco ISE, firewall operations, VPNs, and SD-WAN, with emphasis on day-to-day security operations and strong incident response capabilities.

Qualifications

• Bachelor's degree in CS/IT/telecom or related field.
• 4–8 years in Network Security.
• Minimum 3 years hands-on Cisco ISE experience.
• Strong Firewall Administration and troubleshooting skills.
• Experience supporting enterprise LAN/WAN/Wireless/SD-WAN and security environments.

Responsibilities

• Administer and support Cisco ISE infrastructure and NAC.
• Configure 802.1X, MAB, RADIUS, TACACS+, Guest Access, BYOD, posture.
• Implement TrustSec, SGTs, dynamic authorization, and RBAC.
• Integrate ISE with AD, LDAP, PKI, VPNs, Wireless Controllers, security tools.
• Perform upgrades, patching, backups, and health monitoring of ISE.

Skills

Cisco ISE

802.1X

RADIUS

TACACS+

NAC

Firewall Administration

VPN Technologies

SD-WAN / Viptela

Routing & Switching

Active Directory

MFA

Monitoring Tools

Education

Bachelor's Degree in Computer Science/IT/Telecommunications

Tools

Palo Alto Firewalls

Fortinet FortiGate

Cisco Firepower

Check Point Firewall

Splunk

QRadar

Wireshark

Job description

Job Description

We are seeking an experienced

Job Summary

Job Description

We are seeking an experienced Network Security Engineer (L2) with expertise in Cisco ISE, Firewall Security, SD-WAN, Routing & Switching, and Enterprise Network Security Technologies. The candidate will be responsible for managing and supporting network security infrastructure, identity and access management solutions, firewall operations, and secure connectivity across enterprise environments.

Key Responsibilities

Cisco ISE & NAC

• Administer and support Cisco Identity Services Engine (ISE) infrastructure.
• Configure and troubleshoot 802.1X, MAB, RADIUS, TACACS+, Guest Access, BYOD, and Posture Assessment.
• Implement TrustSec, Security Group Tags (SGT), Dynamic Authorization, and Role-Based Access Controls.
• Integrate Cisco ISE with Active Directory, LDAP, PKI, VPNs, Wireless Controllers, and security tools.
• Perform upgrades, patching, backups, and health monitoring of Cisco ISE environments.

Firewall Administration

• Manage, configure, and troubleshoot enterprise firewall environments.
• Create, modify, review, and optimize firewall security policies.
• Implement and maintain NAT, VPN, IPS, URL filtering, and application-based security policies.
• Analyze firewall logs and security events for incident investigation and troubleshooting.
• Conduct firewall rule reviews, policy recertification, and security hardening activities.
• Support firewall migration, upgrades, and high-availability deployments.

SD-WAN / SWAN

• Support Cisco SD-WAN (Viptela) infrastructure.
• Troubleshoot WAN connectivity, routing, application performance, and VPN issues.
• Configure and maintain SD-WAN security and segmentation policies.
• Manage vManage, vSmart, vBond Controllers, and WAN Edge devices.

Network Security Operations

• Support day-to-day network security operations and incident management.
• Monitor network security alerts and coordinate with SOC teams.
• Perform root cause analysis for security incidents and outages.
• Participate in change management, implementation, and maintenance activities.

Requirements

Job Requirements

Required Technical Skills

Cisco ISE & NAC

• Cisco ISE 2.x / 3.x
• RADIUS
• TACACS+
• 802.1X
• MAB
• TrustSec
• SGT
• dACL
• Endpoint Profiling
• Posture Assessment

Firewall Technologies (Mandatory)

Hands-on Experience With One Or More

• Palo Alto Firewalls
• Security Policies
• App-ID
• User-ID
• GlobalProtect VPN
• Panorama
• Fortinet FortiGate
• Security Policies
• IPS
• SSL Inspection
• FortiManager
• FortiAnalyzer
• Cisco Firepower
• FMC
• Access Control Policies
• Intrusion Prevention System (IPS)
• Check Point Firewall
• SmartConsole
• Security Policy Management

VPN & Remote Access

• IPSec VPN
• Site-to-Site VPN
• Remote Access VPN
• AnyConnect
• GlobalProtect

SD-WAN Technologies

• Cisco SD-WAN (Viptela)
• vManage
• vSmart
• vBond
• Application Aware Routing
• VPN Segmentation

Routing & Switching

• TCP/IP
• VLANs
• STP
• OSPF
• BGP
• EIGRP
• HSRP
• VRF
• QoS

Identity Services

• Active Directory
• LDAP
• Kerberos
• SAML
• Azure AD / Entra ID
• Multi-Factor Authentication (MFA)

Monitoring & Security Tools

• Splunk
• QRadar
• Microsoft Sentinel
• SolarWinds
• Wireshark
• ThousandEyes

Required Qualifications

• Bachelor's Degree in Computer Science, Information Technology, Telecommunications, or related field.
• 4 to 8 years of experience in Network Security.
• Minimum 3 years of hands-on experience with Cisco ISE.
• Strong experience in Firewall Administration and Troubleshooting.
• Experience supporting enterprise LAN, WAN, Wireless, SD-WAN, and Security environments.
• Excellent troubleshooting skills across Authentication, NAC, Firewall, VPN, and Routing technologies.

Preferred Certifications

• CCNP Security
• Cisco Certified Specialist - Security Identity Management Implementation
• PCNSA / PCNSE (Palo Alto)
• NSE 4 / NSE 5 (Fortinet)
• Check Point CCSA / CCSE
• Cisco SD-WAN Specialist
• CCIE Security (Preferred)

Mandatory Skills

• Cisco ISE
• 802.1X
• RADIUS / TACACS+
• NAC
• Cisco SD-WAN / Viptela
• Firewall Administration (Palo Alto / Fortinet / Cisco Firepower / Check Point)
• VPN Technologies
• Routing & Switching
• Active Directory Integration
• Network Security Operations