Network Security Engineer
Job Description
Cloud Destinations LLC. is seeking a Network Security Engineer (Cisco Zero Trust) to support discovery, architecture design, and implementation of Cisco ZTA solutions for multiple clients. This is a remote W2 position focused on hands-on configuration, validation, and real-world delivery across varied environments and network topologies.
In this role, you will help translate client goals and compliance expectations into Cisco ZTA roadmaps, then guide deployments end to end. You will also create documentation and provide training, while partnering closely with clients as the primary technical liaison from scope through completion.
Key Responsibilities
- Lead discovery, architecture design, and implementation of Cisco ZTA solutions for multiple clients across diverse industries and organizational structures
- Run security assessments and produce tailored ZTA roadmaps aligned to business objectives, compliance requirements, and budget constraints
- Manage client relationships and act as the primary technical liaison to communicate scope, deliverables, timelines, and expectations
- Configure, deploy, and validate Cisco ZTA components including SASE, CDO, ISE, Secure Firewall, and DNA Center
- Perform testing, troubleshooting, and optimization across customer environments with varying complexity, scale, and technical maturity
- Develop technical documentation, runbooks, and knowledge transfer materials for customer operations and support teams
- Deliver on-site and remote training to customer technical teams, security staff, and stakeholders on ZTA concepts, best practices, and platform administration
- Support service delivery by meeting project timelines, budget targets, and quality standards while maintaining high customer satisfaction
- Mentor junior consultants and architects by sharing technical expertise and project delivery methodologies
Requirements
- Minimum 5+ years of professional services or consulting experience delivering Cisco network and security solutions to enterprise clients
- Demonstrated ability to lead multiple Zero Trust Architecture (ZTA) design and implementation projects from discovery through completion
- Strong familiarity with NIST SP 800-207 and the ability to apply its guidance to Cisco ZTA design and implementation decisions
- Advanced proficiency with Cisco ASA, ISE, SASE, Defense Orchestrator (CDO), and Secure Firewall
- Expertise in network segmentation, microsegmentation, VPN technologies, and identity-based access control architectures
- Cisco CCNP Security or CCNP Enterprise certification (or equivalent)
- Experience managing client relationships, scoping projects, and delivering against aggressive timelines and budgets
- Excellent communication and presentation skills for executive and non-technical audiences
- Ability to troubleshoot complex issues in production environments with minimal escalation
Technologies
- Cisco ZTA and Cisco ZTA components (SASE, CDO, ISE, Secure Firewall, DNA Center)
- Cisco ASA
- NIST SP 800-207
- VPN technologies
- Cisco CCNP Security, Cisco CCNP Enterprise
- Netskope, Cisco Secure Access, Zscaler
Additional Notes: This is a W2 only role. C2C and C2H will not be considered.
Preferred Qualifications
- Cisco CCIE Security certification
- Experience delivering solutions across multiple customer verticals (financial services, healthcare, manufacturing, government, etc.)
- Expertise with multi-cloud security implementations (AWS, Azure, GCP) and hybrid cloud architectures
- Proven ability to train customer technical teams and create comprehensive knowledge transfer documentation
- Experience with compliance frameworks including PCI-DSS, HIPAA, SOC 2, FedRAMP, NIST SP 800-207, and related Zero Trust guidelines
- Knowledge of API-driven security automation, orchestration platforms, and Infrastructure-as-Code (IaC)
- Track record of thought leadership (speaking at industry events, publishing technical content, or contributing to open-source security projects)
Application Question
- Do you have hands-on experience with Cisco Zero Trust combined with at least one of the following platforms: Netskope, Cisco Secure Access, or Zscaler?
Location: Remote (remote)
Compensation: USD 70 - 75 per hour
Experience Level: 5+ years