Senior Network Security Engineer (Active CCNP Security Required)

rsm; Town of Texas (WI); On-site; USD 120,000 - 160,000; Full time

Job summary

RSM is seeking a Senior Network Security Engineer to design and deploy secure, resilient networks for enterprise clients. You will lead architecture efforts and hands-on deployments, partner with cloud and managed services teams, and serve as a senior escalation point on complex issues.

The role focuses on Cisco security portfolio, with opportunities to mentor peers and influence security posture across engagements. Travel up to 10% is expected.

Qualifications

• Active CCNP Security certification.
• 5+ years designing, implementing, and supporting enterprise-class network and security solutions.
• Deep technical expertise in firewall design and deployment, network segmentation, VPN and remote access, identity services (Cisco ISE), and SSE technologies.
• Strong working knowledge of core routing and switching technologies.
• Hands-on experience with Cisco Secure Firewall (FTD/ASA), ISE, Catalyst and Nexus platforms, Meraki stack, and Secure Access/SASE solutions.

Responsibilities

• Architect and document end-to-end network security solutions including next-generation firewalls, SDWAN, segmentation, secure remote access, identity-based access control, and SASE frameworks following vendor validated designs and best practices.
• Lead the deployment and integration of complex security solutions including Cisco Secure Firewall, Cisco Secure Access, Cisco Umbrella, Cisco ISE, and Cisco Meraki.
• Conduct in-depth assessments of client environments, identify gaps in security posture or policy enforcement, and deliver recommendations to improve resilience, compliance, and performance.
• Act as a senior escalation point for critical incidents from managed clients, providing root-cause analysis, remediation plans, and long-term corrective actions.
• Engage with technical and executive stakeholders to align security architectures with business objectives. Deliver technical workshops, roadmap sessions, and security assessments.
• Partner with cloud, infrastructure, and managed services teams to design holistic solutions that span security, networking, and application delivery.
• Mentor junior engineers and contribute to internal best practices and reference architectures to elevate overall team capability.

Skills

CCNP Security

5+ years experience

Firewall design

Network security architecture

SSE technologies

VPN/Remote access

ISE (Cisco Identity Services Engine)

Education

CCNP Security certification

Tools

Cisco Secure Firewall (FTD/ASA)

Cisco ISE

Cisco Meraki stack

Catalyst/Nexus platforms

Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You'll find an environment that inspires and empowers you to thrive both personally and professionally. There's no one like you and that's why there's nowhere like RSM.

Position Overview

We are seeking a highly skilled Senior Network Security Engineer with a current Cisco Certified Network Professional - Security (CCNP Security) certification to join our team. As a Cisco Preferred partner delivering enterprise transport, security, wireless, cloud, and data center solutions, we help clients design, implement, and optimize secure, resilient networks. This position is part of a well-established network infrastructure team composed of highly experienced, certified engineers recognized for delivering complex network and security implementations. You will serve as a hands-on technical leader and trusted advisor, designing and deploying advanced network infrastructure solutions.

Key Responsibilities

• Network Architecture & Design - Architect and document end-to-end network security solutions including next-generation firewalls, SDWAN, segmentation, secure remote access, identity-based access control, and SASE frameworks following vendor validated designs and best practices.
• Implementation Leadership - Lead the deployment and integration of complex security solutions including Cisco Secure Firewall, Cisco Secure Access, Cisco Umbrella, Cisco ISE, and Cisco Meraki.
• Network & Security Optimization - Conduct in-depth assessments of client environments, identify gaps in security posture or policy enforcement, and deliver recommendations to improve resilience, compliance, and performance.
• Escalation & Problem Resolution - Act as a senior escalation point for critical incidents from managed clients, providing root-cause analysis, remediation plans, and long-term corrective actions.
• Client Advisory & Engagement - Engage with technical and executive stakeholders to align security architectures with business objectives. Deliver technical workshops, roadmap sessions, and security assessments.
• Cross-Domain Collaboration - Partner with cloud, infrastructure, and managed services teams to design holistic solutions that span security, networking, and application delivery.
• Knowledge Sharing & Mentorship - Mentor junior engineers and contribute to internal best practices and reference architectures to elevate overall team capability.

This role supports U.S. government clients. Candidates must be eligible to work on U.S. government engagements and satisfy all applicable client, contractual, background screening, security, and work authorization requirements.

Required Qualifications

• Active Cisco Certified Network Professional - Security (CCNP Security) certification.
• 5+ years of progressive experience designing, implementing, and supporting enterprise-class network and security solutions.
• Deep technical expertise in firewall design and deployment, network segmentation, VPN and remote access, identity services (Cisco ISE), and SSE technologies.
• Strong working knowledge of core routing and switching technologies.
• Hands-on experience with Cisco Secure Firewall (FTD/ASA), ISE, Catalyst and Nexus platforms, Meraki stack, and Secure Access/SASE solutions.
• Proven ability to serve as a senior technical escalation point, providing advanced troubleshooting and root cause analysis for complex client issues.
• Strong communication and presentation skills with the ability to engage technical and business stakeholders.
• Ability to travel up to 10%.

Preferred Qualifications

• Consulting or professional services experience delivering enterprise network and security solutions.
• Familiarity with automation and infrastructure-as-code approaches (Python, Ansible, REST APIs).
• Experience with industrial networking and OT security technologies, including industrial control systems (ICS/SCADA), Purdue Model architecture, network segmentation, and secure integration of IT and OT environments.
• Experience leading network segmentation or security modernization initiatives.
• Experience mentoring and guiding junior engineers, fostering skill development and promoting consistent best practices across the team.
• Experience with dynamic routing protocols (OSPF, BGP, EIGRP).
• Exposure to cloud security integration with AWS, Azure, or GCP.

Why Join Us

Join a high-performing, highly certified Infrastructure Network team within a global consulting firm where the focus is on security architecture, design, and optimization - not repetitive Tier 1/Tier 2 support. You'll work on challenging, high-impact projects, help enterprise clients modernize their network security posture, and deepen your expertise across Cisco's evolving security portfolio - all while coll