Security Architect Consultant (Cisco Security Engineer) - CSE 26-01466

Job Title

Security Architect Consultant (Cisco Security Engineer)

Location: Columbia, SC - Onsite (limited remote flexibility may be discussed after 30 days)
Duration: 6 Months (Extension Possible)

Position Overview

A public-sector organization is seeking an experienced Cisco Security Engineer to support a security modernization initiative involving migration from Cisco Secure Internet Gateway / Cisco Web Secure Access (Umbrella) to Cisco s Secure Service Edge (SSE) platform.

This role is responsible for migrating existing security policies, users, and devices to the SSE architecture while ensuring continuity of service, security controls, and alignment with business requirements. The consultant will serve as a subject matter expert for Cisco Web Secure Access and Secure Internet Access, working closely with security, IT, and business stakeholders to validate and test migrated policies.

Key Responsibilities

• Design, implement, and manage secure access policies supporting enterprise security strategies

• Migrate existing Cisco Umbrella Secure Internet Gateway (SIG) policies to Cisco Secure Access (SSE)

• Document existing firewall, web filtering, and access control policies prior to migration

• Deploy and manage Cisco ASA, Cisco Secure Firewall, and Cisco Secure Access solutions

• Replicate existing web filtering rules to maintain current access permissions

• Support deployment of remote access VPN and ZTNA-based access for end users

• Collaborate with security, IT, and business teams to test and validate migrated policies

• Ensure that security protections and compliance requirements are preserved throughout the migration

Required Skills & Experience

• 3+ years of experience analyzing existing firewall and access policies and converting them into least-privilege rules for private and web-based access

• 3+ years of experience deploying and administering Cisco Secure Firewall, including remote access and IPsec VPN solutions

• 3+ years of experience with endpoint web filtering technologies (Cisco Umbrella or equivalent platforms such as Palo Alto, Check Point, or Fortinet)

• 2+ years of experience deploying Zero Trust Network Access (ZTNA) or SASE solutions

Preferred / Nice-to-Have Skills

• Prior experience deploying Cisco SSE and ZTNA architectures, or comparable solutions from other vendors

• Experience with Cisco SecureX, Secure Endpoint, and Cisco Secure Client

• Hands-on experience administering Cisco Secure Access

• Experience administering Cisco Umbrella, including Secure Internet Gateway products

• Experience designing and managing secure access architectures for enterprise environments

• Experience deploying Cisco Remote Access VPN solutions on ASA platforms

• Experience administering and integrating with Check Point firewalls

Preferred Education & Certifications

• CCNP Security

• CCNP Routing and Switching

• CCSP

Additional Skills

• Strong communication skills with the ability to coordinate across IT and business stakeholders

• Ability to train and mentor IT staff on ongoing administration and support of security solutions