Network Segmentation Engineer @ Capgemini

Job Description

Above 12 years Job type : FTE Mandatory skill: Micro Segmentation. Candidate should have strong exposure of Network Security (Design & Deployment), Enterprise Networking (Branch Level, Datacenter Level) and has got exposure of Network Micro Segmentation. Candidate should have worked on some of the Micro Segmentation Tools like Armis, Akamai, Color Tokens, Net foundry or other similar like product. Exposure of Cisco ISE, Cisco Trustsec Exposure of Firewall (PA, Fortinet. CP, ASA) Candidate should be at architect level. We need a senior resource who can drive the project and advise customer on technical requirement. Relevant experience should be 3 4 years where as 10 12 Years can be considered as overall experience. Experience and Skills required :- Experience designing and supporting Cisco enterprise networks. Solid understanding of network-based segmentation strategies and IoT designs Extensive experience with TCP/IP, VLANs, VLAN Trunking, ACLs, load balancing, QOS. PBR, WCCP, VPN, NAT, VoIP, IPSec, Multicast, DNS services, firewalls, SNMP, Netflow. Extensive experience with Network mirroring technologies SPAN, ERSPAN, RSPAN, TAP. Experience configuring network security policies on firewalls and/or routers. Strong knowledge of network and security architecture best practice Strong knowledge of enterprise switching and routing, and LAN/WAN technologies Experience with cisco DNA Center, Cisco Prime Advanced understanding of networking principles, subnetting and the OSI model Able to understand multi-tier network environments (Core, Distribution, Access,). Creating design documentation, building ISE rules, implementing ISE solutions across a variety of environments, and be a subject matter expert on the ISE tool NAC (network access control) using 802.1x and MAC Authentication Bypass (MAB) Understanding user and machine authentication and authorization using ISE and external identity stores (Active Directory) Guest access control and device profiling and compliancy check TACACS, Radius and Captive Portals Collaborating with peer engineers/analysts, analyzing, solution designing, and leading integration efforts to meet business and functional needs. Collaborate with a variety of IT Security areas and bring deep subject matter expertise in one or more tools/areas leading the team to accomplish automation, productivity gains, and enhanced cybersecurity detection and response capabilities specific to networks using network security threat detection tools. Deployment, configuring, and support tools and technologies relating to network access controls, traffic analysis, network-based user access behavior analytics tools, network intrusion detection and protection tools. Taking the lead during production systems outages quickly troubleshooting technical issues and helping resolve incidents limiting outages and/or containing the security risk Expertise in TrustSEC Expertise in Cybersecurity Medical Devices

Employement Category:

Employement Type: Full time
Industry: IT
Role Category: IT Services & Consulting
Functional Area: Not Applicable
Role/Responsibilies: Network Segmentation Engineer

+ View Contact

Keyskills:   Network Security Enterprise Networking Firewall TCPIP ACLs Load Balancing QOS VPN NAT VoIP IPSec Multicast SNMP Netflow Subnetting OSI model TACACS Radius IT Security Traffic analysis Network intrusion detection Medical Devices Micro Segmentation Network Micro Segmentation Cisco ISE Cisco Trustsec VLANs DNS services Network mirroring technologies SPAN ERSPAN RSPAN TAP Network security policies Network security architecture Enterprise switching routing LANWAN technologies Cisco DNA Center Cisco Prime Networking principles Multitier network environments ISE rules 8021x MAC Authentication Bypass User machine authentication Guest access control Captive Portals Network access controls Networkbased user access behavior analytics tools Network protection tools Cybersecurity