Network Security Analyst

Job Description:

Network Security Analyst

6 months CTH 

• 3+ years of designing, implementing and supporting CISCO ISE is required

Responsibilities:

Work with vendor to ensure the quality design, implementation, installation/configuration, and provide technical admin support for Cisco ISE Authentication Authorization, Posture Assessment, and AnyConnect end point Malware Prevention solutions.

• Upgrade Cisco ISE infrastructure including hardware, software, and AnyConnect

• Perform Cisco ISE Authentication and Authorization

• Enforce security Posture compliance for wired and wireless endpoints and enhance infrastructure security using the Cisco ISE

• Deploy Cisco ISE Profiling and client provisioning services

• Integrate Endpoint Malware Protection Services (AMP) with AnyConnect and Cisco ISE

• Provide Reports, Monitoring, Troubleshooting, and Security

Work with vendor on problem resolution

Create policies and reports to meet the business requirements

Participate in Planning, Design, and Tests

Perform security audits, scan and monitor servers

Investigate and report on security alerts and perform security incident reporting

Requirements:

Expert-level knowledge and experience with design, implementation and support of Cisco ISE

3-5 year of experience working with Network Security applications

Complex routing and switching solutions (Cisco is a must, Nexus strongly preferred, other manufacturers are a plus)

Advance knowledge of networking, TCP/IP, FTP, SCP, firewalls, ACLs, Authentication protocols, Authorization, VPN, PKI, RSA, and Encryption

Knowledge of Directory Services including Active Directory, LDAP, and TDS

Knowledge of F5 load balancers

Knowledge of IT security principles, HIPAA, SOX and PCI regulations

Knowledge of IDS/IPS, Malware Prevention (Sourcefire & Fireye desired, Palo Alto a plus)

Business Analysis skills and ability to translate business requirements into technical requirements

Excellent oral/written communication and organizational skills

Security certification a plus such as CISSP, CEH or CISA