Cisco Network Security Engineer/ Senior Consultant

Deloitte T.T.L.
San Francisco, CA, United States
1 day ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Working hours
Regular working hours

Tech stack

IEEE 802.1X Amazon Web Services Microsoft Azure Profiling Domain Name System Security Extensions Information Systems Security Architecture Professional Network Security Security Information and Event Management Transport Layer Security Identity Services Engine Google Cloud Cloud Platform System
+6 more
Malware Firewalls (Computer Science) Cisco Firewalls Patch Management Firepower Cisco

Job description

Experteer Overview As a Senior Consultant in Deloitte’s Cyber team, you will design, deploy, and optimize Cisco security solutions to enable secure digital transformation for enterprise clients. You’ll work on hybrid and cloud environments, shaping secure architectures and roadmaps. This role combines hands-on engineering with client-facing advisory work to align technical controls with business needs. You will join a collaborative, impact-driven practice focused on resilience and growth. Compensation / Benefits * Design, deploy, and manage Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) across on-prem, virtual, and cloud environments * Implement and support Cisco Identity Services Engine (ISE) including 802.1X NAC, device profiling, guest lifecycle, TrustSec, and identity-store integration * Configure and tune advanced security features (IPS, malware protection, URL filtering, DNS security, Security Intelligence, SSL/TLS decryption) * Deploy Cisco Secure Firewall in cloud environments (AWS, Azure, GCP) and maintain centralized policy across hybrid infrastructures * Develop client-facing security architectures, integrate Cisco with SIEM and automation tools, and deliver recommendations aligning technical, compliance, and business objectives * Lead projects or workstreams and provide clear guidance to others Tasks * BA/BS in a technical field * CCNP Security or CCIE Security * 5+ years of experience in network security with Cisco * 5+ years designing/deploying/ managing FTD and FMC in enterprise environments (including cdFMC) * 5+ years designing/ implementing Cisco ISE (HA configurations, patch management, upgrade planning) * 3+ years ISE 802.1X NAC, guest lifecycle, profiling, TrustSec, and Cisco firewall deployments in AWS/Azure/GCP * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program * reasonable accommodations for people with disabilities

Requirements

across in cloud environments (AWS, Azure, GCP) and maintain centralized policy across hybrid infrastructures * Develop client-facing security architectures, integrate Cisco with SIEM and automation tools, and deliver recommendations aligning technical, compliance, and business objectives * Lead projects or workstreams and provide clear guidance to others Tasks * BA/BS in a technical field * CCNP Security or CCIE Security * 5+ years of experience in network security with Cisco * 5+ years designing/deploying/ managing FTD and FMC in enterprise environments (including cdFMC) * 5+ years designing/ implementing Cisco ISE (HA configurations, patch management, upgrade planning) * 3+ years ISE 802.1X NAC, guest lifecycle, profiling, TrustSec, and Cisco firewall deployments in AWS/Azure/GCP * Ability to travel up to 50% * Limited immigration sponsorship may be available Key requirements * discretionary annual incentive program * reasonable accommodations for people with disabilities

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

1:29 min

Expanding practical knowledge with community sandboxes and resources

Stuart Clark · LIVE

5:11 min

Deploying manual Seccomp profiles to block malware

Dimitrij Klesev +1 · LIVE

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira · Coffee With Developers

3:45 min

Prototyping deterministic agents with n8n and PyATS

Alfonso Sandoval Rosas Alfonso Sandoval Rosas · Europe 2026 Virtual

6:18 min

Architecting asynchronous malware scanning for uploaded file contents

Austin Gil · LIVE

Videos

See all

Related articles

See all