Digital Architecture Senior Consulting Engineer - Network Security

POSITION SUMMARY:

The Network and Security Engineer is responsible for designing, implementing, and supporting secure enterprise network environments, combining hands-on expertise in Cisco security technologies with strong routing and switching skills. This role leads security-focused engagements involving Cisco Secure Firewall/Firepower Threat Defense (FTD), Firepower Management Center (FMC), Cisco Identity Services Engine (ISE), and related network security technologies across enterprise LAN, WAN, wireless, data center, and cloud-connected environments.

In this role, you will support the full engagement lifecycle from discovery and assessment through design, implementation, testing, knowledge transfer, and operational handoff. You will partner with architects, engineers, project managers, sales teams, and managed services personnel to translate business and compliance requirements into scalable technical solutions. You will also contribute to standards development, reusable configurations, automation, incident response readiness, and continuous improvement across Aspire’s security and networking practices.

ESSENTIAL DUTIES AND RESPONSIBILITIES- MAY INCLUDE THE FOLLOWING: OTHER DUTIES MAY BE ASSIGNED.

CORE RESPONSIBILITIES:

• Design, deploy, migrate, and support Cisco Secure Firewall/FTD and FMC, including policies, IPS, NAT, VPN, high availability, upgrades, and reporting.
• Implement and support Cisco ISE for 802.1X, MAB, profiling, guest access, device administration, TrustSec, and policy enforcement.
• Integrate security platforms with Active Directory, PKI, switches, wireless, VPN, endpoint, and logging systems.
• Configure and troubleshoot Cisco routing and switching, including VLANs, STP, EtherChannel, inter-VLAN routing, OSPF, BGP, redundancy, ACLs, and QoS.
• Implement secure segmentation and connectivity across campus, branch, data center, wireless, internet edge, and cloud-connected environments.
• Troubleshoot security and network issues using packet captures, logs, authentication records, routing data, and platform diagnostics.
• Perform security assessments, rule reviews, lifecycle planning, vulnerability remediation, and configuration compliance checks.
• Develop design, implementation and rollback plans, test procedures, as-built documentation, and knowledge-transfer materials; provide escalation support and contribute to delivery standards.

QUALIFICATIONS:

• 3–5 years of hands-on experience delivering enterprise network security or infrastructure consulting solutions.
• Implementation and troubleshooting experience with Cisco Secure Firewall/FTD and FMC, including policies, NAT, VPN, high availability, upgrades, and migrations.
• Experience implementing or supporting Cisco ISE for network access control, authentication, profiling, guest access, or device administration.
• Working knowledge of Cisco routing and switching, including VLANs, STP, EtherChannel, inter-VLAN routing, OSPF, BGP, ACLs, and route troubleshooting.
• Strong understanding of TCP/IP, DNS, DHCP, NAT, PKI, RADIUS, TACACS+, VPN technologies, segmentation, and common enterprise security controls.
• Ability to troubleshoot security and connectivity issues using packet captures, logs, authentication records, routing data, and platform diagnostics.
• Experience developing implementation plans, rollback plans, test procedures, as-built documentation, and client-facing technical deliverables.
• Ability to work independently during implementation windows and communicate risks, dependencies, and status clearly.

PREFERRED QUALIFICATIONS:

• Consulting or professional services experience delivering security projects across campus, branch, data center, wireless, or cloud-connected environments.
• Experience with Cisco Catalyst or Nexus platforms and secure network segmentation.
• Familiarity with Cisco Catalyst Center, pxGrid, SIEM integrations, automation tools, or cloud networking and security.
• Experience with Cisco ASA, Palo Alto Networks, Fortinet, or another enterprise firewall platform.
• Relevant certifications such as CCNP Security, Cisco Certified Specialist in Secure Firewall or Identity Services Engine, CCNA or CCNP Enterprise, CompTIA Security+, CISSP, Palo Alto Networks, or Fortinet.

TECHNICAL COMPETENCIES:

• Security Platforms: Cisco Secure Firewall/FTD, FMC, ISE, ASA, VPN, NAC, segmentation, and policy enforcement.
• Routing and Switching: Cisco Catalyst/Nexus, VLANs, STP, EtherChannel, OSPF, BGP, HSRP/VRRP, ACLs, QoS, and route redistribution fundamentals.
• Operations and Troubleshooting: packet analysis, log review, configuration validation, monitoring, upgrades, incident support, and root-cause analysis.
• Consulting Delivery: discovery, design, implementation planning, change control, documentation, client communication, and knowledge transfer.