High Touch Engineer (HTE) / NCE - SDA, Cisco ISE & Security | BFSI DOMAIN

High Touch Engineer (HTE) / Network Consulting Engineer - SDA, Cisco ISE & Security

Position Overview
* Role Title: High Touch Engineer / Senior Network Consulting Engineer - SDA, ISE & Network Security
* Work Location: Client Onsite - National Stock Exchange (NSE), Mumbai
* Working Model: Onsite (Rotational Morning/Afternoon shifts; 24x7 readiness with Night shifts during approved Maintenance Windows)
* Experience Level: 5-10 Years

Role Summary

We are looking for a skilled Senior Network Consulting Engineer specializing in Cisco Software-Defined Access (SDA), Cisco Identity Services Engine (ISE), and Cisco Next-Generation Firewalls. The candidate will lead deployment, automation, identity policy optimization, and network security operations for NSE's multi-site infrastructure.

Key Responsibilities
* SDA Fabric & Automation Operations: Manage Cisco Catalyst Center (formerly DNAC), lead automated device onboarding via Plug-and-Play (PnP), deploy CLI templates, and manage fabric provisioning.
* Identity & Access Management (Cisco ISE): Design, onboard, and tune ISE authentication/authorization policies, 802.1X integration, Profiling, TACACS+/RADIUS device administration, and Posture frameworks.
* Firewall Operations & Optimization: Manage Cisco Secure Firewalls (FTD/FMC and ASA), optimize firewall rule bases, audit NAT policies, and fine-tune High Availability (HA) stateful failover mechanisms.
* Proactive Audits & Compliance: Conduct proactive bug scrubs, security posture assessments, vulnerability hardening, and ensure zero deviation from Cisco security baselines.
* Lifecycle & RMA Management: Execute automated software image management (SWIM) via Catalyst Center, lead RMA replacements via SDA workflows, and support night maintenance windows.

Required Technical Skills & Expertise
* Cisco Catalyst Center & SDA:
* Hands-on fabric management (Border, Control Plane, Intermediate, Edge, Subtended node lan automation & integration).
* Device onboarding via Network Plug and Play (PnP) and configuration templates (Velocity/Jinja2).
* Automated software upgrades (SWIM) and RMA replacement workflows through Catalyst Center.
* Cisco Identity Services Engine (ISE):
* Advanced policy sets for Wired/Wireless 802.1X (EAP-TLS, EAP-MSCHAPv2, PEAP, MAB).
* Endpoint profiling & Posture assessment.
* Integration with Microsoft Active Directory, PKI/Certificate Authorities, and MDM.
* Cisco Security / Firewalls:
* Cisco FTD / Firepower Management Center (FMC) & Cisco ASA.
* Stateful Active/Standby & Active/Active failover optimization, connection limits, and timeout tuning.
* Security policy pruning, access-list optimization, and VPN (IPsec/SSL AnyConnect) troubleshooting.
* Hardware Platforms: Cisco Catalyst 9000 switches (Cat9300, Cat9400, Cat9500, Cat9600), Cisco ISE appliances/VMs, and Cisco Firepower 2100/4100/9300 Series.

Qualifications & Certifications
* Education: B.E. / B.Tech / BCA / MCA in Electronics, Computer Science, or related field.
* Certifications: CCNP Security / Enterprise (Required); Cisco Certified Specialist - Enterprise SD-Access Implementation or CCIE Security (Strongly Preferred).