Cisco Stealthwatch SME

Cisco Stealthwatch SME

Cambridge (Hybrid) | £500-£540 per day | Inside IR35 | 12-Month Contract

We are seeking an experienced Cisco Secure Network Analytics (SNA) Consultant to support a major network visibility and security analytics improvement programme for a leading global technology organisation.

This is an exciting opportunity for a specialist with strong Cisco SNA, NetFlow and network security analytics experience to lead the redesign, implementation and optimisation of a global monitoring environment.

You will play a key role in improving network traffic visibility, strengthening security analytics and developing a scalable, resilient architecture across a complex global network.

The Role

You will take ownership of assessing and enhancing the existing Cisco Secure Network Analytics environment, delivering a replacement platform and developing a strategy to expand NetFlow and syslog coverage across the global network.

A particular focus will be improving east-west traffic visibility across campus, data centre and cloud environments.

Key Responsibilities

Cisco SNA Architecture & Implementation

Assess the existing Cisco SNA architecture, configurations, integrations and telemetry collection.

Design and deploy a replacement Cisco SNA infrastructure using procured hardware and software.

Configure and optimise Flow Managers, Flow Collectors and UDP Directors.

Migrate existing configurations and data sources, ensuring platform functionality and resilience.

Evaluate load-balancing and high-availability solutions, including HAProxy and alternative technologies.

Network Visibility & Telemetry

Review existing global NetFlow and syslog coverage, identifying gaps and opportunities for improvement.

Develop strategies to improve network traffic visibility, particularly east-west traffic flows.

Design scalable collection, forwarding and distribution architectures.

Assess telemetry coverage across campus, data centre and hybrid cloud environments.

Identify opportunities to automate NetFlow and syslog deployment.

Security Analytics & Optimisation

Tune Cisco SNA security policies, behavioural analytics, alarms and detection thresholds.

Establish traffic baselines, host groups and network classifications.

Reduce false positives and alert fatigue while improving threat detection.

Optimise telemetry ingestion, data retention and overall platform performance.

Collaborate with Network Reliability Engineering and Security teams to develop meaningful monitoring use cases.

Documentation & Knowledge Transfer

Produce architecture diagrams, technical documentation and operational procedures.

Deliver knowledge transfer and operational handover to internal engineering teams.

Essential Skills & Experience

Proven experience designing, deploying and optimising Cisco Secure Network Analytics (SNA) environments.

Strong technical knowledge of NetFlow, syslog, Flow Managers, Flow Collectors and UDP Directors.

Experience with network traffic analytics, security monitoring and behavioural detection.

Strong Cisco enterprise networking and network security expertise.

Experience improving telemetry collection, network visibility and monitoring architectures.

Ability to design scalable, resilient and highly available network analytics platforms.

Desirable Experience

Network automation using Python, Ansible, Terraform or REST APIs.

Automation of NetFlow and syslog configuration and deployment.

Experience with Git and CI/CD workflows.

HAProxy, load balancing and high-availability architectures.

UDP traffic distribution and Flow Collector scalability.

Hybrid cloud networking and east-west traffic monitoring.

Project Deliverables

You will be expected to deliver:

A comprehensive assessment of the existing Cisco SNA environment.

A redesigned and fully operational Cisco SNA platform.

Optimised security analytics, monitoring policies and alerting.

Improved global NetFlow and syslog coverage.

A strategy and roadmap for enhanced east-west traffic visibility.

Recommendations for Flow Collector load balancing and high availability.

Complete technical documentation and knowledge transfer.

Contract Details

Location: Cambridge - Hybrid working

Rate: £500-£540 per day

IR35 Status: Inside IR35

Contract Length: 12 months

Interested? If you have hands-on Cisco Secure Network Analytics experience and a strong background in network visibility and security analytics, we'd be keen to hear from you
Only candidates based in UK and eligible to work in UK are allowed