Senior Network Engineer

Overview

NETS-International Group is seeking a Senior Network Engineer with deep expertise in Cisco network security technologies to work on-site in Doha, Qatar on a contract basis. This role demands a seasoned professional with at least 10 years of experience, specializing in Cisco Identity Services Engine, Secure Email Gateway, and Secure Firewall appliances.

Key Responsibilities

• Manage and deploy large-scale implementations of Cisco Identity Services Engine (ISE) for Network Admission Control (NAC), catering to diverse endpoint environments.
• Design and implement guest network solutions tailored to meet various business requirements.
• Execute device profiling, posture assessments, and ensure compliance across multiple device categories.
• Integrate ISE with third-party security and management platforms for comprehensive security posture oversight.
• Configure and administrate enterprise mail flow systems, incorporating Cisco Advanced Malware Protection (AMP) and email sandboxing technologies.
• Operate Cisco Secure Email Gateway clusters to maintain high availability and optimize inbound security processing.
• Manage Security Management Appliance (SMA) for centralized quarantine and threat containment tasks.
• Oversee the deployment, upgrade, and migration of Cisco Firepower Threat Defense (FTD) and ASA firewalls in complex network settings.
• Administer Firepower Management Centers (FMC) configured in high availability modes.
• Deploy and tune Intrusion Prevention Systems (IPS) to enhance network security posture.
• Resolve sophisticated security incidents with advanced troubleshooting techniques and provide expert support.
• Integrate Cisco security devices with enterprise directory services like Active Directory, LDAP, and SAML authentication solutions.
• Collaborate on integration efforts with Security Information and Event Management (SIEM) platforms, Multi-Factor Authentication (MFA), and various enterprise monitoring tools to ensure cohesive security operations.

Qualifications and Experience

• Minimum of 10 years’ experience in network security and Cisco technologies.
• Hold a valid Cisco CCIE Security certification.
• Proven skills in Cisco Identity Services Engine (ISE) for NAC and TACACS management.
• Strong hands-on experience with Cisco Secure Email Gateway and associated malware protection systems.
• Expertise in Cisco Secure Firewall appliances, including Firepower Threat Defense (FTD) and ASA platforms, along with enterprise-level Firepower Management Center (FMC) administration.
• Experience integrating Cisco security solutions with enterprise authentication and monitoring systems.