About the Role

The Solutions Architect will be a part of the US Solutions Delivery team and is responsible for leading planning, deployment, and validation of Cisco ISE-based segmentation across enterprise campus environments of our customer, on-site at the customer location. This role is delivery-focused and security-first - combining deep expertise in identity-based access control with hands-on policy engineering and enforcement validation. The architect ensures segmentation architectures are operationally sound, scalable, and Day-2 ready, while coordinating closely with customer network, security, and endpoint teams. The ideal candidate holds CCIE Security-level expertise and brings 8–10 years of hands-on experience in Cisco security and network segmentation.

Key Responsibilities

Segmentation Design & Deployment

• Drive rollout of ISE-based segmentation across the campus environment
• Deploy and operationalize TrustSec / Security Group Tag (SGT) policy architecture
• Define, validate, and troubleshoot SGACLs, authorization policies, profiling rules, and enforcement workflows

Integration & Troubleshooting

• Integrate Cisco ISE with switches, wireless controllers, VPN concentrators, and security platforms
• Optimize and troubleshoot 802.1X, MAB, profiling, posture, TrustSec, and pxGrid.
• Validate endpoint classification, policy assignment, and segmentation enforcement across user, device, and application traffic flows

Execution & Coordination

• Coordinate testing, pilot execution, phased migration, and production cutover activities
• Identify and resolve deployment issues, policy conflicts, authentication failures, and enforcement gaps in partnership with customer stakeholders
• Support Cisco Catalyst Center integration and automation workflows

Handover & Documentation

• Execute change implementation following customer change management processes
• Deliver operational handover documentation, runbooks, and knowledge transfer sessions

Basic Qualifications

• 8–10 years in Cisco security engineering, network segmentation, or architecture roles
• Expert-level knowledge of Cisco ISE — deployment, policy design, TrustSec/SGT, and administration
• CCIE Security certification or equivalent demonstrated expertise (CCNP Security + deep ISE specialization considered)
• Hands-on with 802.1X, MAB, profiling, posture, pxGrid, and Catalyst Center for wired and wireless environments
• Proven experience in customer-facing architecture, consulting, or delivery leadership
• Good understanding of networking basics — routing, switching, VLANs, TCP/IP, along with general knowledge of campus networking

Preferred Qualifications

• Knowledge of Cisco Secure Firewall / Next-Generation Firewall (NGFW)
• Cisco Catalyst Center — network device management, zero-touch provisioning, software image management (SWIM), automation workflows, network assurance, and ISE integration
• CISSP, GIAC, or other industry-recognized security certifications
• Experience with security automation and scripting (Python, Ansible, APIs)
• Knowledge of Cisco Secure Access, Umbrella, or XDR platforms; familiarity with compliance frameworks (PCI-DSS, HIPAA, SOC 2, GDPR)

Salary Range

$‍150,000 - $175,000 USD