Senior Cybersecurity Engineer – Secure Access Network SQUARE ONE Resources sp. z o.o. Mazowieck

Senior Cybersecurity Engineer – Secure Access Network

• Join a global Network Security team responsible for designing, developing, and enhancing Secure Access and Zero Trust solutions in a large enterprise environment.
• As a Senior Cybersecurity Engineer, you will act as a technical expert responsible for designing and improving Network Access Control, network segmentation, and identity-based security mechanisms. You will collaborate with international security and infrastructure teams to deliver scalable and secure access solutions.

• Design, implement, and enhance Cisco ISE solutions.
• Manage and develop Network Access Control (NAC) environments.
• Implement authentication mechanisms based on: 1X, EAP-TLS, EAP-TEAP, RADIUS, TACACS+.
• Design and implement solutions based on Cisco Trust Sec and micro-segmentation.
• Manage access policies aligned with Zero Trust architecture.
• Integrate security platforms with Identity Provider (IdP) solutions.
• Automate security processes using Terraform, Ansible, Python, and APIs.
• Troubleshoot complex technical issues and provide support to global engineering teams.
• Share knowledge and mentor junior engineers.

• Minimum 5 years of hands-on experience with Cisco ISE.
• Strong expertise in:
  Cisco ISE, Trust Sec, 1X, MAB, Profiling, Guest Portal, Security Group Tags (SGT).
• Practical experience with RADIUS, TACACS+, PKI, and certificate-based authentication.
• Hands-on experience with Palo Alto Next-Generation Firewall.
• Knowledge of automation tools:
  Terraform, Ansible, and Python.
• Experience with Zero Trust architecture and Identity-Based Access Control.
• Understanding of network segmentation technologies:
• Trust Sec, VRF, VLAN, VXLAN.
• Good knowledge of networking protocols: BGP, OSPF.
• Experience working in large-scale enterprise environments.

• Experience with Git Hub/Git Lab CI/CD.
• Knowledge of REST APIs and security platform automation.
• Experience with Power Shell or Bash scripting.
• Certifications such as Cisco Security, Palo Alto, or CISSP.
• Experience in regulated industries such as pharmaceutical, healthcare, or financial sectors.