Network Security DevOps Engineer

Insight IT•Spring, TX

22h

About The Position

The Network Security Authentication & Tools Engineer is responsible for managing and maintaining key security platforms, including Cisco ISE, Algosec, and firewall management systems, to ensure secure network access and policy compliance. This role involves supporting AAA services and 802.1X authentication across wired and wireless environments, collaborating with global teams, and automating processes using tools like Ansible, Python, and Terraform. The engineer monitors system health, handles incidents, manages change control, and participates in a global on-call rotation. knowledge of Fortinet and Cisco technologies, network authentication protocols, and scripting. Strong communication, troubleshooting, and teamwork.

Requirements

Experience in Fortinet and Cisco Network Security technology domain such as Cisco Identity Services Engine, Policy Management tools Algosec , Cisco Security Manager, Cisco Firepower Management Center, FortiManager, FortiAnalyzer.
Experience in Network Authentication technology such as 802.1x, TACACS/RADIUS.
Proficiency in troubleshooting network access issues across various platforms.
Knowledge of network endpoint profiling.
Basic experience in AWS cloud computing technology (EC2, VPC)
Familiarity with CI/CD pipelines and infrastructure as code (IaC)
Hands-on experience in scripting or automation (Python, Ansible, Terraform, GitHub)
Fluent English communication skills, both verbal and written
Strong analytical and troubleshooting abilities
Team-oriented mindset with a proactive attitude to work in a global virtual team environment
Able to work independently with minimal supervision
Presentation and interpersonal skills
Cisco Identity Services Engine (ISE) – Network Authentication technology such as 802.1x, TACACS/RADIUS
Firewall Policy Management Tools (Algosec)
Experience in scripting or automation (Python, Ansible, Terraform, GitHub)

Responsibilities

Maintain and operate firewall security management platforms including network authentication servers (Cisco ISE), firewall security policy compliance management tools (Algosec) and firewall management servers.
Administer and maintain global Cisco Identity Services Engine (ISE) platform, provide technical support and troubleshooting for authentication, authorization, and accounting (AAA) services, including 802.1X network access control across wired and wireless environments.
Supports the network privileged ID framework, which provisions-controlled access to corporate network devices.
Collaborate with network, network security, and endpoint owner teams to ensure seamless integration and policy enforcement.
Identify and implement automation opportunities for laborious and/or repetitive processes with modern programming techniques like Ansible/Python/Terraform/REST API.
Managing Ansible playbooks for automation deployment,
Monitor system health, performance, and logs; respond to alerts and incidents.
Provides change management for the supported platforms.
Participate in on-call rotation and provide escalation support for critical issues.
Timely assess security advisories and software vulnerabilities and provide necessary remediation for the supported platforms.
Follow-the-sun on-call rotation (AP/NA region weekday & weekend on call)
Each team member is on call for one week per rotation