Cisco Security Engineer

Location: Columbia, SC 29201

Work Arrangement: Onsite

Job Type: Contract

We are seeking a highly specialized Cisco Security Engineer to lead a critical migration project for a major judicial entity. This role focuses on transitioning an enterprise environment from Cisco Secure Internet Gateway (Umbrella) to Cisco's advanced Security Service Edge (SSE) suite.

The successful consultant will act as a Subject Matter Expert (SME), ensuring that existing policies, users, and devices are migrated seamlessly while upholding the highest standards of security and business continuity.

• Policy Migration: Document and migrate existing Umbrella SIG policies to Secure Access, ensuring all web filtering rules replicate current access permissions.

• Architecture & Design: Design and manage secure access policies to support broader enterprise security strategies, specifically focusing on Secure Internet Access (SIA).

• Network Security Deployment: Deploy, administer, and support Cisco ASA, Cisco Secure Firewall, and Cisco Secure Access products.

• Modern Access Solutions: Assist in the deployment of Remote Access VPN and Zero Trust Network Access (ZTNA) for end users.

• Validation & Testing: Collaborate with IT and business stakeholders to test migrated policies, ensuring security protections remain robust on the new platform.

• Knowledge Transfer: Train internal IT staff on the ongoing administration and maintenance of the newly implemented products.

• Rule Optimization: 3+ years of experience analyzing existing firewall/web rules and converting them into least-privilege policies.

• Firewall Expertise: 3+ years of experience deploying and administering Cisco Secure Firewall for Remote Access and IPSEC-based VPNs.

• Web Filtering: 3+ years of experience with Cisco endpoint web filtering (or equivalent technologies like Palo Alto, Checkpoint, or Fortinet).

• SASE/ZTNA: 2+ years of hands-on experience deploying ZTNA or SASE tools.

• Communication: Proven ability to coordinate with technical and non-technical stakeholders effectively.

• Certifications: CCNP Security, CCNP Routing and Switching, or CCSP.

• Cisco Ecosystem: Experience with Cisco SSE, SecureX, Secure Endpoint, and the Cisco Secure Client.

• Legacy Support: Experience administering Cisco Umbrella SIG and Cisco ASA platforms.

• Multi-Vendor Experience: Previous experience interfacing with Check Point firewalls.