SENIOR NETWORK & SECURITY ENGINEER

Sycomp is hiring a Senior Network & Security Engineer to deliver customer-facing enterprise networking and security Professional Services engagements. The role leads next-generation firewall and Cisco ISE/NAC projects, supports segmentation and routing/security integration, and owns implementation, migration, troubleshooting, documentation, and customer coordination.

Responsibilities:

• Plan, implement, configure, troubleshoot, and migrate enterprise next-generation firewalls, with particular focus on Palo Alto Networks NGFW, Panorama and Strata Cloud Manager
• Design and validate firewall security policies, zones, NAT, IPsec VPNs, high availability, logging, dynamic routing (BGP/OSPF), and migration cutover/rollback procedures
• Deploy and troubleshoot Cisco Identity Services Engine (ISE), including policy sets, 802.1X, MAB, RADIUS, TACACS+, certificates, device profiling, and authorization outcomes
• Integrate NAC with enterprise wired and wireless infrastructure; troubleshoot endpoint authentication and connectivity across switches, APs, controllers and firewalls
• Support segmentation and Zero Trust initiatives, including policy discovery, phased enforcement, operational testing, and change control
• Troubleshoot production security/network incidents using packet captures, session tables, logs, routes and authentication traces
• Lead technical discovery, detailed implementation design, and configuration reviews with customers and Solutions Architects
• Create high-level/low-level documentation, method-of-procedure (MOP), change and rollback plans, acceptance test plans, and as-built records
• Own implementation, production cutovers, post-migration validation, troubleshooting, and knowledge transfer
• Coordinate with project managers, customer teams, and vendor support; communicate risks, dependencies, and progress
• Support multiple engagements, including scheduled maintenance windows and customer-site work as needed

Requirements:

• Hands-on enterprise NGFW configuration and migration experience
• Strong routing and switching fundamentals, particularly BGP, OSPF, VLANs, HA, network redundancy and troubleshooting
• Practical Cisco ISE experience implementing and diagnosing 802.1X, MAB, RADIUS and access policies
• Ability to deliver security deployments safely in production environments, including staged migrations and rollback plans
• Working familiarity with enterprise wireless authentication and campus network integrations
• Excellent structured troubleshooting, packet analysis, customer communication, and technical writing skills
• Self-directed, adaptable, collaborative, and comfortable owning deliverables in a fast-paced consulting environment
• Approximately 5+ years of relevant enterprise engineering experience, or equivalent demonstrated expertise
• Customer-focused communication and technical consulting
• Cross-functional teamwork and collaboration
• Organization, documentation, and ownership of deliverables
• Structured troubleshooting and problem-solving
• Adaptability in fast-paced customer environments
• Palo Alto Networks strongly preferred
• CCNP Enterprise or Security certification preferred; equivalent practical expertise considered
• CCNP Security or Enterprise; Palo Alto PCNSE or current equivalent certification
• Cisco Secure Firewall/FTD, Fortinet, Aruba ClearPass and TrustSec/SGT
• Palo Alto Advanced Routing Engine, BFD, SD-WAN, microsegmentation and Zero Trust policy design
• Automation with Python, Ansible, APIs and centralized firewall management platforms