Network Security Engineer - Cisco

Job Description

Description Responsible for designing, implementing, and managing secure network infrastructure and configuration management processes for CBDC systems. Ensure high availability, security, and compliance across all network components supporting digital currency operations, including peer node connectivity and DNS resolution. Network Management Design and maintain secure network architecture for CBDC platforms. Configure and manage routers, switches, firewalls, and VPNs. Implement network segmentation and zero-trust principles for sensitive CBDC workloads. Manage peer node connectivity for CBDC blockchain networks, ensuring secure and reliable communication between nodes. Configure and maintain CoreDNS for internal name resolution and service discovery within containerized and distributed environments. Monitor network performance, latency, and bandwidth utilization. Troubleshoot network issues and ensure minimal downtime. Manage load balancers and high-availability clusters for CBDC services. Configuration Management Implement and maintain configuration management tools (e.g., Ansible, Puppet, Chef). Automate deployment and configuration of network devices and servers. Maintain version-controlled configuration repositories for audit and compliance. Ensure consistency across environments (development, staging, production). Apply security hardening and compliance checks on configurations. Security & Compliance Enforce network security policies, including firewall rules and intrusion detection. Conduct vulnerability assessments and remediate findings promptly. Ensure compliance with ISO 27001, PCI DSS, and central bank security standards. Monitoring & Reporting Use tools like Nagios, Prometheus, Grafana for network and configuration monitoring. Generate reports on network health, configuration drift, and compliance status. Disaster Recovery & Backup Maintain network redundancy and failover strategies. Participate in DR drills and ensure network resilience. Expertise And Qualifications Strong experience in network administration (Cisco, Juniper, Fortinet). Expertise in firewall configuration, VPN setup, and secure network design. Hands-on experience with peer node connectivity in blockchain or distributed systems. Knowledge of CoreDNS setup and troubleshooting in Kubernetes/OpenShift environments. Experience with configuration management tools (Ansible, Puppet, Chef). Familiarity with CBDC architecture, blockchain-based systems, and secure environments. Understanding of network protocols (TCP/IP, DNS, HTTP/S, SSL/TLS). Proficiency in automation scripting (Python, Bash). (ref:hirist.tech)