Network Security Engineer – Cisco SASE & SD-WAN (Viptela)

Confidential; Makati; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Confidential in the Philippines seeks a Network Security Engineer with hands-on Cisco SD-WAN (Viptela) and SASE expertise to design, deploy, and optimize secure enterprise networks across branch, cloud, and data center environments.

The ideal candidate will lead security policy implementation, perform incident response, and collaborate with security, cloud, and infrastructure teams to ensure a robust security posture.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Network Engineering, or related field.
• 5+ years of experience in enterprise networking and network security.
• 3+ years of hands-on experience with Cisco SD-WAN (Viptela).
• 2+ years of experience with Cisco SASE technologies.
• Cisco certifications are preferred (e.g., Enterprise SD-WAN, Security Solutions) and strong troubleshooting skills.

Responsibilities

• Design, deploy, configure, and maintain Cisco SD‑WAN (Viptela) solutions.
• Manage and support SD‑WAN components: vManage, vSmart, vBond, WAN Edge Routers.
• Implement application‑aware routing, segmentation, QoS, and traffic engineering policies.
• Perform network troubleshooting, root cause analysis, and performance optimization.
• Support WAN migration projects from MPLS to SD‑WAN architectures.
• Develop and maintain SD‑WAN SOPs and documentation.
• Implement Cisco SASE solutions including SWG, CASB, and ZTNA, with identity integrations.

Skills

BGP OSPF EIGRP

VPN technologies

Zero Trust

Security policies

Network monitoring

Troubleshooting

SASE Architecture

SD-WAN

TCP/IP

Education

Bachelor's Degree in CS/IT/Networking

Tools

Cisco SD-WAN (Viptela)

Cisco SASE technologies

Automation tools (Python, Ansible, Terraform)

Job description

We are seeking a highly skilled Network Security Engineer with strong expertise in Cisco Secure Access Service Edge (SASE) and Cisco SD-WAN (Viptela) technologies. The successful candidate will be responsible for designing, implementing, optimizing, and supporting secure enterprise network infrastructures across branch, cloud, and data center environments. This role requires hands‑on experience with network security, WAN transformation, cloud connectivity, and Cisco security solutions.

Key Responsibilities:

• Design, deploy, configure, and maintain Cisco SD‑WAN (Viptela) solutions.
• Manage and support SD‑WAN components include:
• vManage
• vSmart Controllers
• vBond Orchestrators
• WAN Edge Routers
• Implement application‑aware routing, segmentation, QoS, and traffic engineering policies.
• Perform network troubleshooting, root cause analysis, and performance optimization.
• Support WAN migration projects from traditional MPLS to SD‑WAN architectures.
• Develop and maintain SD‑WAN operational documentation and standard operating procedures.
• Implement and manage Cisco SASE solutions, include:
• Secure Web Gateway (SWG)
• Cloud Access Security Broker (CASB)
• Zero Trust Network Access (ZTNA)
• Configure security policies and access controls based on Zero Trust principles.
• Integrate SASE services with enterprise identity providers such as Azure AD and Okta.
• Monitor and improve security posture alike cloud and hybrid environments.
• Support remote workforce security and secure application access initiatives.

Network & Security Operations

• Collaborate with security, cloud, and infrastructure teams to ensure secure network architecture.
• Perform incident response and remediation for network and security‑related issues.
• Analyze network traffic and security logs to identify threats and vulnerabilities.
• Ensure compliance with security standards and organizational policies.
• Participate in network design reviews and architecture planning sessions.

Required Qualifications:

Education

• Bachelor's Degree in Computer Science, Information Technology, Network Engineering, or related field.

Experience

• 5+ years of experience in enterprise networking and network security.
• 3+ years of hands‑on experience with Cisco SD‑WAN (Viptela).
• 2+ years of experience with Cisco SASE technologies.

Technical Skills

• Routing Protocols (BGP, OSPF, EIGRP)
• VPN Technologies (IPSec, DMVPN, SSL VPN)
• Network Segmentation and Security Policies
• Firewalls and Secure Access Solutions
• DNS Security
• Zero Trust Architecture
• Network Monitoring and Troubleshooting Tools
• TCP/IP, LAN/WAN Technologies

Preferred Qualifications

• Experience with Cisco Catalyst SD‑WAN.
• Experience integrating SASE with cloud platforms.
• Knowledge of automation tools such as Python, Ansible, or Terraform.
• Exposure to network observability and analytics tools.
• Experience working in a multi‑vendor enterprise environment.

Certifications (Preferred)

• Cisco Certified Specialist – Enterprise SD‑WAN Implementation
• Cisco Certified Specialist – Security Solutions
• CCIE Security (Preferred)
• CISSP or equivalent cybersecurity certification
• Strong analytical and troubleshooting skills
• Excellent communication and stakeholder management
• Ability to work independently and collaboratively
• Customer‑focused mindset
• Strong documentation and presentation skills
• Problem‑solving and decision‑making capabilities

Others:

• Only those applicants who already have the right to live and work in the Philippines are eligible to apply for this role.