AWS Network Security (TESCO)

AWS Network Security Engineer 

Location: [Your Location – e.g., Pune, Maharashtra]

Job Type: Full-Time

Experience Level: Senior (5+ years)

Role Overview:

We are looking for a seasoned AWS Network Security Engineer to lead the deployment and management of a Cisco Identity Services Engine (ISE) environment within our AWS infrastructure. This role demands deep expertise in cloud-based network security, ISE architecture, and secure integration practices.

Key Responsibilities:

• Architect and deploy Cisco ISE within AWS cloud environments.
• Design secure VPC architectures and configure routing, subnets, and security controls.
• Implement and manage AWS security services (e.g., IAM, Security Groups, NACLs, GuardDuty, etc.).
• Integrate ISE with AWS services and on-prem systems for identity and access control.
• Conduct vulnerability assessments and ensure compliance with security standards.
• Automate deployment and configuration using tools like Terraform, Ansible, or CloudFormation.
• Monitor network traffic and logs to detect and respond to security incidents.
• Maintain detailed documentation of network configurations, security policies, and operational procedures.
• Collaborate with infrastructure, application, and security teams to ensure seamless integration.

Required Qualifications:

• Bachelor’s degree in Computer Science, IT, or related field.
• 5+ years of experience in network security engineering, preferably in cloud environments.
• Hands-on experience with AWS networking (VPC, Transit Gateway, VPN, Direct Connect).
• Proven experience deploying and managing Cisco ISE.
• Strong understanding of TCP/IP, DNS, DHCP, RADIUS, TACACS+, and other network protocols.
• Experience with firewall configurations, VPNs, and endpoint security.
• Familiarity with automation and Infrastructure-as-Code (IaC) tools.

Preferred Certifications:

• AWS Certified Security – Specialty
• Cisco Certified Network Professional (CCNP) Security
• Certified Information Systems Security Professional (CISSP)