Cisco Network Security Engineer

Description
At CDW, we make it happen, together. Trust, connection, and commitment are at the heart of how we work together to deliver for our customers. It's why we're coworkers, not just employees. Coworkers who genuinely believe in supporting our customers and one another. We collectively forge our path forward with a level of commitment that speaks to who we are and where we're headed. We're proud to share our story and Make Amazing Happen at CDW. Our team is seeking a highly skilled
* Cisco Network Security Engineer
* that will sit out of
* Seal Beach, CA
* . The ideal candidate will bring deep hands-on expertise in Cisco network technologies, with a strong emphasis on
* Identity Services Engine (ISE)
* , network security architecture, and enterprise-level troubleshooting. This role requires an active
* TS/SCI clearance
* and experience operating in secure environments.
* Key Responsibilities
* Design, configure, and maintain secure network architectures across classified environments.
* Implement and manage Cisco security platforms including routers, switches, firewalls, and security appliances.
* Administer and optimize
* Cisco Identity Services Engine (ISE)
* for authentication, authorization, and network access control (NAC).
* Monitor and assess network performance, security posture, and compliance.
* Troubleshoot complex network issues and perform root cause analysis.
* Support continuous improvement of network security policies, procedures, and best practices.
* Collaborate with cyber, systems, and infrastructure teams to ensure seamless security integration.
* Prepare documentation, diagrams, and change requests in accordance with government standards.
* Participate in on-call, incident response, and scheduled maintenance as required.
Required Qualifications
* Active
* TS/SCI clearance
* (no exceptions).
* 5+ years of experience as a Network Engineer or Network Security Engineer.
* Strong background in
* Cisco networking technologies
* (routing, switching, firewalls).
* Proven experience with
* Cisco ISE
* deployment, configuration, and policy management.
* Hands-on experience with protocols such as BGP, OSPF, EIGRP, 802.1X, TACACS+, and RADIUS.
* Familiarity with network hardening and cybersecurity principles aligned with DoD or federal guidelines.
* Ability to work on-site in Seal Beach, CA.
* Preferred Qualifications
* Cisco certifications such as CCNP Security, CCNP Enterprise, or CCIE (Security or Enterprise).
* Experience in DoD or Intelligence Community environments.
* Knowledge of Cisco ASA, Firepower, or Secure Firewall Threat Defense (FTD).
* Background with monitoring tools (e.g., SolarWinds, Splunk) or automation (e.g., Python, Ansible).
* Strong documentation skills and experience with change management processes.
* We make technology work so people can do great things.
* CDW is a leading multi-brand provider of information technology solutions to business, government, education and healthcare customers in the United States, the United Kingdom and Canada. A Fortune 500 company and member of the S&P 500 Index, CDW helps its customers to navigate an increasingly complex IT market and maximize return on their technology investments. Together, we unite. Together, we win. Together, we thrive. CDW is an equal opportunity employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, sex, sexual orientation, gender identity, national origin, disability status, protected veteran status or any other basis prohibited by state and local law. CDW is committed to fostering an equitable, transparent, and respectful hiring process for all applicants. During our application process, CDW's goal is to get to know you as an applicant and understand your experience, strengths, skills, and qualifications. While AI can help you present yourself more clearly and effectively, the essence of your application should be authentically yours. To learn more, please review [CDW's AI Applicant Notice](https://www.cdwjobs.com/pages/ai-applicant-notice).