Network SME/ Architect

Why Zensar?

We re a bunch of hardworking, fun-loving, people-oriented technology enthusiasts. We love what we do, and we re passionate about helping our clients thrive in an increasingly complex digital world. Zensar is an organization focused on building relationships with our clients and with each other and happiness is at the core of everything we do. In fact, we re so into happiness that we ve created a Global Happiness Council, and we send out a Happiness Survey to our employees each year. We ve learned that employee happiness requires more than a competitive paycheck, and our employee value proposition grow, own, achieve, learn (GOAL) lays out the core opportunities we seek to foster for every employee. Teamwork and collaboration are critical to Zensar s mission and success, and our teams work on a diverse and challenging mix of technologies across a broad industry spectrum. These industries include banking and financial services, high-tech and manufacturing, healthcare, insurance, retail, and consumer services. Our employees enjoy flexible work arrangements and a competitive benefits package, including medical, dental, vision, 401(k), among other benefits. If you are looking for a place to have an immediate impact, to grow and contribute, where we work hard, play hard, and support each other, consider joining team Zensar!

Zensar is looking for a Network SME/ Architect in the United States.

Job Description:

• Design, deploy, configure, and maintain Cisco ISE- L4 for network access control (NAC) and identity-based policy enforcement.
• Implement 802.1X authentication, MAB (MAC Authentication Bypass), and posture assessment for wired and wireless networks.
• Manage device profiling, guest access portals, BYOD policies, and certificate-based authentication (EAP-TLS/PEAP).
• Integrate ISE with Active Directory, PKI, and other authentication systems.
• Develop and maintain ISE policies, network device groups, and authorization profiles.
• Monitor ISE logs and troubleshoot authentication and authorization issues.
• Perform ISE patching, backup, and system upgrades as part of lifecycle management.

Firewall Responsibilities:

• Configure, manage, and troubleshoot Cisco ASA, Firepower (FTD), Palo Alto, or Fortinet firewalls.
• Create and maintain access control policies (ACLs), NAT, VPNs, and security zones.
• Monitor and analyze firewall logs to detect anomalies or potential security breaches.
• Collaborate with security teams to enforce Zero Trust and micro-segmentation strategies.
• Conduct firewall performance tuning and ensure compliance with security standards.

Good to have

General Network Security:

• Collaborate with network operations and security teams to ensure consistent policy enforcement across wired, wireless, and VPN environments.
• Participate in incident response, root cause analysis, and remediation for security events.
• Develop and maintain network documentation, diagrams, and standard operating procedures (SOPs).

Required Skills & Qualifications:

• Bachelor s degree in Computer Science, Information Technology, or related field.
• 5+ years of experience in network security engineering.
• Hands-on experience with Cisco ISE (2.x or 3.x) deployment and management.
• Strong understanding of RADIUS, TACACS+, EAP, 802.1X, VLANs, and network access control.
• Experience with Cisco ASA, Firepower, or next-generation firewalls (NGFW).
• Proficiency with Cisco Catalyst switches, wireless controllers, and VPN technologies.
• Familiar with network monitoring tools (SolarWinds, Splunk, Wireshark, etc.).
• Cisco certifications such as CCNP Security, CCIE Security, or Cisco ISE Specialist are highly desirable.

Preferred Qualifications:

• Experience with multi-vendor firewall platforms (Palo Alto, Fortinet, Check Point).
• Understanding of Zero Trust Network Access (ZTNA) and SASE architectures.
• Familiarity with automation and scripting (Python, Ansible) for network configurations.

Thanks & Regards