Sr. Cisco Network Engineer

JOB TITLE: Sr. Cisco Network Engineer

EMPLOYMENT TYPE/DURATION: 6-month Contract, possible extension

LOCATION DETAILS: On-site,Santa Clara, CA

Job Summary

- Serve as a senior technical leader for enterprise network security, specializing in Cisco ISE and NAC solutions.
- Design, implement, and support Cisco-based secure network infrastructures, focusing on identity-based access, segmentation, and compliance.
- Architect and deploy secure wired and wireless access controls across multi-site environments.
- Integrate Cisco ISE with Active Directory/LDAP, PKI/certificate services, MDM/endpoint compliance platforms, and SIEM/security tools.
- Implement and manage 802.1X authentication, guest portals, BYOD workflows, and posture assessment/remediation processes.
- Deploy and administer Cisco TrustSec policies and VLAN segmentation for policy-based access control.
- Lead advanced troubleshooting of complex authentication, authorization, and network connectivity issues.
- Perform upgrades, patching, and lifecycle management for Cisco network infrastructure.
- Collaborate with cybersecurity teams to ensure alignment with zero-trust security strategies.
- Create and maintain technical documentation, network diagrams, and operational procedures/runbooks.
- Mentor and provide technical guidance to junior network engineers.
- Participate in on-call escalation support and provide expert-level incident response as needed.

Key Requirements
- 7+ years of enterprise network engineering experience, including 3+ years with Cisco ISE/NAC.
- Deep expertise in Cisco Catalyst switches, wireless LAN controllers, 802.1X, RADITACACS+, VLAN segmentation, and policy-based access.
- Experience with Cisco DNA Center, TrustSec, multi-site ISE deployments, and distributed node architectures.
- Strong knowledge of TCP/IP, routing protocols (BGP, OSPF, EIGRP), switching, firewall integration, and packet analysis (Wireshark).
- Required certifications: CCNP Enterprise (or equivalent); CCIE and CISSP are a plus.
- Preferred experience in large/global enterprise environments, zero-trust architectures, cloud identity integration (Azure/AWS), Cisco Secure Access/SASE, and network automation (Python, Ansible, REST APIs).