Cisco Network Security Engineer/ Senior Consultant

About the Role

Deloitte's Cyber business is passionate about making an impact with lasting change. Our team understands the unique challenges and opportunities businesses face in cybersecurity. Join us to deliver powerful solutions that help clients navigate the ever-changing threat landscape, enabling them to operate with resilience, grow with confidence, and proactively manage to secure success.

Responsibilities

• Designing, deploying, and managing Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) solutions across enterprise environments, including physical, virtual, and cloud-delivered deployments
• Implementing and supporting Cisco Identity Services Engine (ISE) capabilities, including 802.1X network access control, device profiling, guest lifecycle management, TrustSec segmentation, and integration with enterprise identity stores
• Configuring and tuning advanced Cisco security features, including intrusion prevention system (IPS), malware protection, URL filtering, DNS-based security, Security Intelligence, and SSL/TLS decryption policies
• Deploying and integrating Cisco Secure Firewall solutions in cloud environments (AWS, Azure, GCP), supporting centralized policy management and secure connectivity across hybrid infrastructures
• Developing client-facing security architectures, integrating Cisco platforms with SIEM tools and automation solutions, and delivering recommendations aligned with technical, compliance, and business objectives

Qualifications

• BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
• CCNP Security or CCIE Security certification required
• 5+ years of experience in network security engineering with Cisco security technologies
• 5+ years designing, deploying, and managing Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) in enterprise environments (physical, virtual, cdFMC)
• 5+ years designing and implementing Cisco Identity Services Engine (ISE), including distributed architectures, high availability, patch management, and upgrade planning
• 3+ years of experience with Cisco ISE 802.1X NAC, guest management, profiling, TrustSec, and Firepower capabilities (IPS, malware, URL filtering, DNS security, SSL/TLS decryption, cloud firewall deployments)
• Ability to travel up to 50%

Skills

• Ability to design, assess, and troubleshoot enterprise network security environments using Cisco technologies
• Proficiency in implementing and managing Cisco FTD, FMC, and ISE solutions
• Expertise in 802.1X NAC, profiling, guest access, TrustSec, and policy enforcement
• Skill in analyzing and tuning firewall, IPS, SSL/TLS decryption, and threat prevention controls
• Experience with secure network and firewall deployments across on-premises, campus, data center, and cloud environments
• Ability to produce technical assessments, architectures, roadmaps, and executive deliverables
• Project or workstream leadership experience
• Strong task management and prioritization in fast-paced environments
• Clear communication and guidance skills

Preferred Qualifications

• Additional certifications: CISSP, GSEC, GCED
• Experience with Cisco Secure Access, Umbrella, Secure Client, or Duo in Zero Trust architectures
• Familiarity with Cisco XDR, SecureX, or Firepower/ISE telemetry integration
• Proficiency in REST APIs, Ansible, Terraform, or Python for automation
• Experience with Cisco Catalyst Center and ISE integration for SD-Access
• Consulting experience in network security, NAC, segmentation, or Zero Trust

Recruiting for this role ends on 12/31/2026. Limited immigration sponsorship may be available.

The wage range for this role is $105,400 to $207,800, considering factors like skill sets, experience, and certifications. This range does not include geographic differentials. Compensation decisions are based on individual circumstances.