Position: AWS Network Security SME(TESCO)

Job Description

AWS Network Security Engineer

Role Overview :

We are looking for a seasoned AWS Network Security Engineer to lead the deployment and management of a Cisco Identity Services Engine (ISE) environment within our AWS infrastructure.

This role demands deep expertise in cloud-based network security, ISE architecture, and secure integration practices.

Key Responsibilities
• Architect and deploy Cisco ISE within AWS cloud environments.
• Design secure VPC architectures and configure routing, subnets, and security controls.
• Implement and manage AWS security services (e.g., IAM, Security Groups, NACLs, Guard Duty, etc.).
• Integrate ISE with AWS services and on-prem systems for identity and access control.
• Conduct vulnerability assessments and ensure compliance with security standards.
• Automate deployment and configuration using tools like Terraform, Ansible, or Cloud Formation.
• Monitor network traffic and logs to detect and respond to security incidents.
• Maintain detailed documentation of network configurations, security policies, and operational procedures.
• Collaborate with infrastructure, application, and security teams to ensure seamless integration.

Required Qualifications
• Bachelor’s degree in Computer Science, IT, or related field.
• 5+ years of experience in network security engineering, preferably in cloud environments.
• Hands-on experience with AWS networking (VPC, Transit Gateway, VPN, Direct Connect).
• Proven experience deploying and managing Cisco ISE.
• Strong understanding of TCP/IP, DNS, DHCP, RADIUS, TACACS+, and other network protocols.
• Experience with firewall configurations, VPNs, and endpoint security.
• Familiarity with automation and Infrastructure-as-Code (IaC) tools.
Preferred Certifications
• AWS Certified Security – Specialty.

• Cisco Certified Network Professional (CCNP) Security.

• Certified Information Systems Security Professional (CISSP).