Network & Security Engineer

Vakansiyanın təsviri

• Design and implement network changes across LAN, WAN, WLAN, SD-WAN, SD-Access and NGFW — including secure branch integrations.
• Lead the migration of traditional WAN to Cisco SD-WAN.
• Build and enforce security policy on next-gen firewalls (Palo Alto, Fortinet, and/or Cisco).
• Manage segmentation, remote-access VPN, and site-to-site IPsec tunnels.
• Drive access control and micro-segmentation policy through Cisco ISE.
• Act as the escalation point for network security incidents.
• Troubleshoot complex, cross-domain issues (Routing / SDA / ISE / Firewalls).
• Keep documentation, diagrams and security policies current.

Xüsusi tələblər

• You don't need to be an expert in every technology below. A strong core plus real depth in a couple of areas is exactly what we want.
• Solid, hands-on routing & switching: OSPF, BGP, EIGRP, route-maps/PBR, VRF-Lite; STP/RSTP, LACP, VLANs/802.1Q on Cisco Catalyst 9000 (Nexus a plus).
• Deep, hands-on experience with at least one leading NGFW platform — Palo Alto (PAN-OS/Panorama), Fortinet (FortiGate/FortiManager), or Cisco Secure Firewall/Firepower (FMC/ASA). Familiarity with the others is a plus.
• Real experience with IPsec site-to-site and remote-access VPN (GlobalProtect, FortiClient, or AnyConnect).
• Hands-on experience with at least one of Cisco ISE, SD-Access, or SD-WAN in production.
• Advanced troubleshooting across intersecting technologies.

Müraciət etmək üçün: [email protected]