Cisco Network Security Engineer/ Senior Consultant

Join Deloitte's Cyber team in Philadelphia on site, focusing on Cisco security technologies across on-premises, cloud, and hybrid environments. This role offers a competitive compensation package with a yearly salary ranging from USD 105,400 to 207,800, plus eligibility for a discretionary annual incentive program. A BA/BS degree is required, and the position emphasizes hands-on delivery, security architecture, and collaboration with enterprise security initiatives.

As part of Deloitte's Enterprise Security offering, you will help secure digital transformation by protecting the technical backbone while enabling secure innovation. The team encompasses security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Responsibilities

• Designing, deploying, and managing Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) solutions across enterprise environments, including physical, virtual, and cloud-delivered deployments
• Implementing and supporting Cisco Identity Services Engine (ISE) capabilities, including 802.1X network access control, device profiling, guest lifecycle management, TrustSec segmentation, and integration with enterprise identity stores
• Configuring and tuning advanced Cisco security features, including intrusion prevention system (IPS), malware protection, URL filtering, DNS-based security, Security Intelligence, and SSL/TLS decryption policies
• Deploying and integrating Cisco Secure Firewall solutions in cloud environments, including AWS, Microsoft Azure, and Google Cloud Platform (GCP), while supporting centralized policy management and secure connectivity across hybrid infrastructures
• Developing client-facing security architectures, integrating Cisco platforms with security information and event management (SIEM) tools and automation solutions, and delivering recommendations that align technical requirements, compliance needs, and business objectives

Requirements

• BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience)
• CCNP Security or CCIE Security certification required
• 5+ years of experience in network security engineering with Cisco security technologies
• 5+ years of experience designing, deploying, and managing Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) in enterprise environments, including physical appliances, virtual instances, and cloud-delivered Firewall Management Center (cdFMC)
• 5+ years of experience designing and implementing Cisco Identity Services Engine (ISE), including distributed node architectures, high availability configurations, patch management, and upgrade planning
• 3+ years of experience with Cisco Identity Services Engine (ISE) 802.1X Network Access Control (NAC), guest lifecycle management, profiling policies, TrustSec segmentation, and Cisco Firepower capabilities including IPS, malware protection, URL filtering, DNS-based security, SSL/TLS decryption, and cloud firewall deployments in AWS, Azure, or GCP
• Ability to travel up to 50%, on average, based on the work you do and the clients and industries/sectors you serve
• Limited immigration sponsorship may be available

Technologies

• Cisco Firepower Threat Defense (FTD)
• Firepower Management Center (FMC)
• Cisco Identity Services Engine (ISE)
• 802.1X Network Access Control
• TrustSec
• IPS, URL filtering, DNS-based security, SSL/TLS decryption
• Security Intelligence
• Cisco Secure Firewall
• AWS, Microsoft Azure, Google Cloud Platform (GCP)
• SIEM, cdFMC
• Cisco Catalyst Center, SD-Access
• REST APIs, Ansible, Terraform, Python
• Duo Security, Cisco Umbrella, Cisco Secure Client, Cisco SecureX, Cisco Secure Access

Benefits

• Discretionary annual incentive program eligibility