Forward Deployed Engineer –Service Provider OSS/BSS Integration (Remote)

Cisco•Bismarck, ND

10d•$160,800 - $214,100•Remote

About The Position

Cisco Security Business Group (SBG) is seeking a Forward Deployed Engineer (FDE) to act as the technical liaison between Cisco's Security Service Edge (SSE) / Secure Access engineering team and Service Provider (SP) and sovereign partners. This role involves deep networking and security expertise, focusing on integrating Cisco's SSE platform APIs with partner OSS/BSS systems for functions like ordering, onboarding, provisioning, identity, policy, billing, and reporting. The FDE will work with Cisco's comprehensive security portfolio, including VPN, zero trust access, cloud web inspection, firewall, CASB, and DLP. The position operates at the intersection of the SSE platform, Cisco Cloud Control, Cisco Financial Systems, and the systems used by partners to manage services for their customers. The role requires global collaboration across regions and time zones with Service Providers, sovereign partners, product management, and engineering teams. Travel up to 50% within the U.S. and internationally is expected.

Requirements

7+ years of experience in security, cloud platform engineering, or integration roles with direct customer or partner ownership.
Practical experience with REST API design, OAuth2/token-based authentication, and webhook or event-driven integration patterns.
Experience with multi-tenant identity and organizational data modeling and RBAC/ABAC design.
Hands-on software development, scripting, or middleware integration experience.
Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, Information Technology, or a related technical field, or equivalent practical experience.

Nice To Haves

Experience integrating with Service Provider OSS/BSS systems, including ordering, provisioning, billing/metering, or workflow orchestration platforms.
Experience supporting large Service Provider, sovereign, or telecommunications accounts.
Exposure to usage-based or MSLA billing models and metering or stream-processing pipelines such as Kafka, EventBridge, or similar technologies.
Experience with API-driven workflow orchestration, durable execution, or saga-pattern implementations.
Experience with observability platforms such as Grafana, Loki, Prometheus, or similar.
Experience with cloud infrastructure, multi-tenant resource pooling, capacity planning, or cloud cost optimization.
Experience using AI-assisted development tools to build or deliver software solutions.
Prior experience managing Cisco on-premises and cloud security products in production partner environments.

Responsibilities

Serve as the two-way technical liaison between Service Provider and sovereign partners and Cisco's SSE product management and engineering organizations.
Represent Cisco engineering to partners by clearly communicating technical findings, API constraints, delivery timelines, and platform roadmap trade-offs.
Represent partners within Cisco by bringing their OSS/BSS architecture, multi-tenancy requirements, business impact, and operational constraints into engineering and product discussions.
Own complex escalations and multi-tenant integration challenges while translating evolving requirements into concrete API contracts, data models, and delivery plans.
Take a hands-on approach to implementing and coding middleware and integration solutions that connect partner systems with Cisco platforms.
Balance both sides during escalations by setting realistic expectations with partners while providing engineering with accurate, reproducible technical evidence and well-scoped requirements.
Advocate strongly for partner outcomes while maintaining technical accuracy and engineering feasibility.
Lead technical integration engagements with Service Provider and sovereign partners across ordering, onboarding, provisioning, identity, policy, billing, and reporting workflows.
Design and validate multi-tenant identity and organizational models, including hierarchical tenant structures, RBAC/ABAC role inheritance, precedence rules, and backward-compatible migrations.
Work across Cisco platform and gateway APIs, including Cisco Cloud Control and Secure Access, to design and validate REST APIs, OAuth2/token-federation flows, and safe, retryable, and idempotent onboarding and provisioning workflows.
Design event-driven and webhook integrations, including pub/sub patterns, retry/backoff, HMAC signature verification, stable event schemas, and trigger-based automation.
Partner with billing and platform engineering on usage metering, telemetry pipelines, billing-period rollups, and usage-to-invoice reconciliation supporting usage-based licensing models.
Define policy-as-code and configuration-management patterns, including JSON schemas, policy inheritance, declarative configuration APIs, and appropriate RBAC scoping.
Build or specify workflow orchestration across independently versioned ordering, onboarding, and provisioning APIs, including correlation IDs and recovery from partial failures.
Drive proactive partner health by monitoring integration readiness, configuration and policy consistency, regression testing, and repeat-incident prevention.
Build clean escalations for engineering, including timelines, impact, reproduction steps, logs, and redacted configurations, and translate outcomes back to the partner.
Code and script integrations, diagnostics, health checks, automation, and environment reproduction while leveraging AI-assisted development best practices.

Benefits

medical, dental and vision insurance
a 401(k) plan with a Cisco matching contribution
paid parental leave
short and long-term disability coverage
basic life insurance
10 paid holidays per full calendar year, plus 1 floating holiday for non-exempt employees
1 paid day off for employee’s birthday, paid year-end holiday shutdown, and 4 paid days off for personal wellness determined by Cisco
16 days of paid vacation time per full calendar year, accrued at rate of 4.92 hours per pay period for full-time employees (non-exempt)
flexible vacation time off program (exempt)
80 hours of sick time off provided on hire date and each January 1st thereafter
up to 80 hours of unused sick time carried forward from one calendar year to the next
Additional paid time away may be requested to deal with critical or emergency issues for family members
Optional 10 paid days per full calendar year to volunteer
annual bonuses (non-sales roles)
performance-based incentive pay (sales roles)