Engineering Product Manager

Cisco•Milpitas, MI

2d•Remote

About The Position

Cisco's Enterprise Networking team is hiring a Product Manager to own identity and segmentation outcomes across the Catalyst and Meraki switching portfolio. This is a security product role that lives inside the network business: you will define how identity from Cisco ISE and Duo becomes enforceable segmentation policy on the switch, in traditional campus designs as well as SD-Access and EVPN fabrics, anchored to the Cisco Secure Network Reference Architecture. Your Impact You will own one of the highest-leverage surfaces in enterprise security: the point where identity becomes enforcement in the campus network. Own strategy and roadmap for how Catalyst and Meraki switches consume identity from Cisco ISE and Duo and enforce group-based segmentation through TrustSec, Security Group Tags, and Meraki Adaptive Policy. Define how those security outcomes layer onto both non-fabric campus designs and SD-Access and EVPN fabrics, so customers get one consistent policy model wherever they sit on the fabric journey. Drive the discovery and modeling layer that turns identity, endpoint, and flow data into enforceable switch policy: visibility, policy analytics, simulation, and staged enforcement customers can trust in production. Grow adoption of the identity-to-enforcement path that the majority of customers deploying Cisco networking and security together build on, with the switch as the enforcement point supplying policy context that Hybrid Mesh Firewall and detection services consume. Land these outcomes within the Cisco Secure Network Reference Architecture in partnership with the ISE, Duo, firewall, detection, and platform teams. Practice disciplined product management: continuous customer discovery, opportunity sizing, crisp requirements, adoption instrumentation, and launch execution with engineering, design, marketing, and sales. Use AI tools throughout the product lifecycle to compress research, requirements, and analysis cycles, and raise the bar for how the team operates.

Requirements

Bachelor's degree in computer science, engineering, or a related technical or business field, or equivalent practical experience.
3+ years of product management experience, including building or shipping cybersecurity products: identity and access management, zero trust, network security, NAC, or firewall.
Experience with customer discovery, prioritization, roadmap ownership, metrics-driven iteration, and cross-functional execution.
Experience architecting identity and segmentation concepts such as 802.1X, RADIUS, device posture, group-based policy, microsegmentation, and firewall policy models.
Previous experience with enterprise campus networking, both traditional L2/L3 designs and overlay fabrics such as SD-Access or EVPN, sufficient to partner deeply with switching platform engineering teams.

Nice To Haves

Hands-on product experience with identity, NAC, segmentation, or firewall platforms from any major vendor, for example Cisco ISE or Duo, Palo Alto Networks, Fortinet, Zscaler, Okta, Microsoft Entra, or Aruba ClearPass.
Familiarity with zero trust frameworks (NIST SP 800-207, CISA Zero Trust Maturity Model) and how campus segmentation maps to them.
Experience defining adoption metrics and telemetry for enterprise software and using them to steer roadmap decisions.
Daily use of AI tools in product work: research synthesis, requirements drafting, competitive analysis, or prototyping.
Clear, concise communication with executives, customers, and field teams.

Responsibilities

Own strategy and roadmap for how Catalyst and Meraki switches consume identity from Cisco ISE and Duo and enforce group-based segmentation through TrustSec, Security Group Tags, and Meraki Adaptive Policy.
Define how those security outcomes layer onto both non-fabric campus designs and SD-Access and EVPN fabrics, so customers get one consistent policy model wherever they sit on the fabric journey.
Drive the discovery and modeling layer that turns identity, endpoint, and flow data into enforceable switch policy: visibility, policy analytics, simulation, and staged enforcement customers can trust in production.
Grow adoption of the identity-to-enforcement path that the majority of customers deploying Cisco networking and security together build on, with the switch as the enforcement point supplying policy context that Hybrid Mesh Firewall and detection services consume.
Land these outcomes within the Cisco Secure Network Reference Architecture in partnership with the ISE, Duo, firewall, detection, and platform teams.
Practice disciplined product management: continuous customer discovery, opportunity sizing, crisp requirements, adoption instrumentation, and launch execution with engineering, design, marketing, and sales.
Use AI tools throughout the product lifecycle to compress research, requirements, and analysis cycles, and raise the bar for how the team operates.

Benefits

medical, dental and vision insurance
a 401(k) plan with a Cisco matching contribution
paid parental leave
short and long-term disability coverage
basic life insurance
10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco
16 days of paid vacation time per full calendar year, accrued at rate of 4.92 hours per pay period for full-time employees (non-exempt employees)
flexible vacation time off program (exempt employees)
80 hours of sick time off provided on hire date and each January 1st thereafter, and up to 80 hours of unused sick time carried forward from one calendar year to the next
Additional paid time away may be requested to deal with critical or emergency issues for family members
Optional 10 paid days per full calendar year to volunteer
annual bonuses
performance-based incentive pay
grants of Cisco restricted stock units