Job Description :
Role: Cisco ISE Engineer Location: Houston- Texas Duration: Contract Roles and Responsibilities IT Security Enablement (Projects) and IT Security Service Delivery (Support) Qualification Extensive knowledge and experience in supporting Firewalls (Cisco and Palo Alto), Cisco ISE, third party VPN, Web Proxies, LAN/WAN Extensive knowledge in AAA concepts and 802.1x. Experience in Network Security, Vulnerability Management, Identity and Access Management, Internet Security, Data Protection and End Point Protection. 5 years of experience in implementing, configuring managing Cisco ISE and Cisco ASA and FTD. 5 Years of IT Security experience preferably in an Enterprise environment. Good written and communication skill. Team player Hours: 7am-4pm with off-shift work for implementation as required Role to include: ISE Support Implementation/rollout activities of Cisco ISE on wired network. Onboarding switches to ISE cluster. Troubleshooting and fixing authentication issues. Troubleshooting and fixing Profiling related issues. Create new static profiles as per need and new observations. Moving unknown devices to whitelists. Follow Information security concepts that are applied to end-points for authentication and authorization through 802.1x and MAB Serve as Technical Point Person in case of any interruptions as a result of ISE deployment on wired network. Day-to-day monitoring and administration of ISE and making sure its availability and performance. Onboarding of NADs and endpoints in coordination with endpoint owners, security and network teams. Resolve any issue reported and resolve it. Creating operational procedures as a result of new ISE features implementation. Coordinate and execute changes and enhancements. Make sure the standard, and best practices are followed all the time. Generate reports when required. Firewall Support Implement new firewalls to include design, initial build to standards, deployment, testing and support Create New Zones and interfaces on the Cisco Next Generation Firewalls. Create New ACEs based on the traffic analysis. IOS Upgrade from ASA to FTD. Migrate Rules form ASA image to FTD image. Prepare Configuration, Test, and Back-Out Procedures for any kind of changes on the firewalls. Serve as Technical Point Person in case of any interruptions as a result of any migration. Day-to-day monitoring and administration of the firewalls and making sure its availability and performance. Coordinate and execute Server migrations to different zones. Make sure the standard, and best practices are followed all the time. Generate reports when required. Security Service Delivery Support Perform network security maintenance and system upgrades including service packs, patches, hot fixes and configurations Resolve trouble tickets with first-time right accuracy. Monitor performance, ensure system availability and reliability Monitor system resource utilization, trending, and capacity planning Provide senior engineer level troubleshooting support to resolve issues Work within established configuration and change management policies to ensure awareness, approval and success of changes made in the region Work with 3rd party partners and other IT personnel for problem resolution