Network Security Engineer

DMI; Pikesville (MD); Hybrid; USD 96,000 - 120,000; Full time

Job summary

DMI in Maryland is seeking a Network Security Engineer to lead a migration from Cisco ASA to Cisco Firepower Threat Defense and to assess an existing Cisco ISE deployment.

The role emphasizes high availability, secure access, and integration of infrastructure devices on-premises with hybrid work options. The candidate should have extensive Cisco identity services and firewall experience, and must be a US citizen or hold a valid work permit.

Qualifications

• Bachelor’s degree in CS/IS/Engineering or related field.
• At least 12 years computing experience and 10 years in security requirements.
• US Citizenship or valid work permit; on-site in Pikesville, MD.

Responsibilities

• Provide Assessment Of An Existing Cisco Identity Services Engine (ISE). Review deployment topology, high availability, and architecture.
• Review current configuration, logs, and integration of infrastructure devices; evaluate golden configs and enhanced authentication.
• Enable TACACS for admin use cases and create 3 AAA device templates; deliver remediation and knowledge transfer sessions.
• Conduct Wireless Health Check of the WLAN environment and provide optimization and remediation recommendations.
• Coordinate closure meeting with client to review findings and recommendations.

Skills

Cisco ISE

Network security

Firewall migration

TACACS

Education

Bachelor's degree in CS/IS/Engineering

Master's degree substitute experience

12+ years IT experience

10+ years specialized security

Tools

Cisco ISE

ASA/FTD

WLAN design

Job description

DMI is a leading global provider of digital services working at the intersection of public and private sectors. With broad capabilities across IT managed services, cybersecurity, cloud migration and application development, DMI provides on-site and remote support to clients within governments, healthcare, financial services, transportation, manufacturing, and other critical infrastructure sectors. DMI has grown to over 2,100+ employees globally and has been continually recognized as a Top Workplace in both regional and national categories.

About The Opportunity

DMI is seeking a Network Security Engineer to successfully complete the migration from two (2) pair of Cisco (high availability) ASA firewalls to Cisco Firepower Threat Defense (FTD) image, combining Cisco ASA and Firepower features into one hardware and software inclusive system. In addition, the candidate will perform an assessment of an existing Cisco Identity Services Engine (ISE) deployment.

Duties And Responsibilities

Task 2

• Provide An Assessment Of An Existing Cisco Identity Services Engine (ISE). Cisco ISE Is Currently Deployed During This Assessment The Candidate Will Review
• Deployment Topology of ISE Servers
  • Deployment Mode
  • Best Practices
  • Network Architecture
  • High Availability
  • GA Recommended Code Levels
• Review current Configuration.
• Review Logs
• Review Integration of Infrastructure Devices
• Review Golden Configs
• Review enhanced Authentication.

In Addition

• Enable TACACS for (3) admin use cases and create up to 3 AAA device templates.
• Provide remediation from the information collected during the Assessment Phase of this project.
• Knowledge Transfer Sessions.

Wireless Health Check, Primary WLC/Dashboard: Gather a assessment services of the production Wireless LAN (WLAN) environment including optimization and remediation recommendations as necessary Assessment will be based on manufacturer recommended best Practices for WLAN Design and Deployment. A closure meeting with the Client will be scheduled to review the assessment findings.

Qualifications

Education and Years of Experience

• a Bachelor’s degree from an accredited college or university with a major in computer science, information systems, engineering, business, or a related scientific or technical discipline.
• A Master’s Degree in one of the above disciplines is equal to one(1) year of specialized and two (2) years of general experience.
• An additional year of specialized experience may be substituted for the required education.
• Must have at least twelve (12) years of computer related experience.
• Must have at least ten (10) years of specializedexperience in defining computer security requirements for high-level applications, evaluation of approved security product capabilities, and security management.

Required and Desired Skills/Certifications

Cisco Identity Service Engine (ISE) Expertise.

Min Citizenship Status Required

US Citizen or valid work permit.

Physical Requirements

No Physical requirement needed for this position.

Location

Pikesville, Maryland

Work Arrangement

With the option of Hybrid – must work on-premise location at 1201 Reisterstown Road, Pikesville , MD 21208

Minimum Salary Rate

$96,086

Median Salary Rate

$120,108

Job ID: 2026-28968