Network Security Engineer – Netskope SWG, ZTNA, Cisco ISE & Cisco NAC || Contract || Delhi/Hyderabad

Network Security Engineer – Netskope SWG, ZTNA, Cisco ISE & Cisco NAC

Contract

Delhi/Hyderabad

Key Responsibilities

Design, implement, and manage Netskope Secure Web Gateway (SWG) and Zero Trust Network Access (ZTNA) solutions.

Configure and administer Netskope security policies for web access, cloud applications, DLP, malware protection, and threat prevention.

Deploy and manage Cisco Identity Services Engine (ISE) for authentication, authorization, and accounting (AAA).

Implement and maintain Cisco Network Access Control (NAC) policies for wired, wireless, and VPN users.

Configure and manage 802.1X authentication, guest access, BYOD onboarding, and endpoint posture assessment.

Integrate Cisco ISE with Active Directory, LDAP, certificate services, and third-party identity providers.

Develop and enforce role-based access control (RBAC) and Zero Trust security policies.

Monitor security events, investigate incidents, and perform root cause analysis for authentication and access-related issues.

Perform policy tuning and optimization to minimize false positives while maintaining security compliance.

Troubleshoot network authentication, access control, VPN connectivity, and endpoint compliance issues.

Work closely with network, cloud, endpoint, and security teams to implement secure access solutions.

Participate in security audits, vulnerability assessments, and compliance initiatives.

Create technical documentation, SOPs, architecture diagrams, and operational runbooks.

Support production incidents, change management activities, and on-call rotations as required.

Required Skills

Strong hands-on experience with Netskope Secure Web Gateway (SWG).

Experience implementing and supporting Netskope Zero Trust Network Access (ZTNA).

Expertise in Cisco Identity Services Engine (ISE) administration.

Strong knowledge of Cisco Network Access Control (NAC).

Experience with 802.1X authentication, RADIUS, TACACS+, and certificate-based authentication.

Knowledge of endpoint posture validation and device compliance.

Experience integrating Cisco ISE with Active Directory, LDAP, PKI, and MFA solutions.

Understanding of Zero Trust Network Architecture (ZTNA) principles.

Knowledge of TCP/IP, DNS, DHCP, VPN, VLANs, and enterprise networking concepts.

Experience troubleshooting authentication and network access issues.

Familiarity with ITIL processes, incident management, change management, and problem management.