Network Security Engineer – Network Access Control

• Support multiple security engineering efforts to deliver enterprise security capabilities
• Serve as a subject matter expert on security technology
• Oversee major engineering milestones, including system design, development, and implementation
• Report on key metrics
• Execute engineering initiatives and partner with cross-functional teams across BofA's global network footprint
• Identify gaps in environment management standards adherence and develop plans to close them
• Define and ensure security requirements based on BofA standards and policies
• Incorporate threat models, diagrams, and technology requirements into solution development
• Use network, virtualization, and datacenter technologies to support deployment strategies
• Work across technology teams to understand and deliver system requirements
• Build and improve processes for system transformation, quality controls, dependency management, and workload management
• Implement integration, regression, and performance test suites
• Analyze test reports, identify issues, and triage root causes
• Document and communicate deployment, maintenance, support, and business functionality requirements
• Follow team delivery and release processes and cadence

• 5+ years of hands-on experience with Cisco ISE and Cisco SNA in enterprise environments
• Experience designing and troubleshooting distributed Cisco ISE deployments (PAN, PSN, MnT nodes)
• Experience with 802.1X authentication (wired and wireless) and MAC Authentication Bypass (MAB)
• Experience with Net Flow/IPFIX analysis, behavioral analytics, East-West traffic visibility, insider threat detection, data exfiltration detection, and threat hunting
• Ability to work effectively with technical and non-technical business owners
• Experience working in large enterprise environments
• Strong understanding of TCP/IP, Routing and Switching, BGP, OSPF, VLANs, VRFs, and RADIUS
• Experience with Cisco Catalyst, Nexus, and wireless infrastructure
• Experience with packet capture and protocol analysis using Wireshark
• Exposure to Skyhigh Secure Web Gateway (SWG)
• Exposure to proxy policy categories

Demonstrates extensive experience in security engineering, particularly with Cisco ISE and SNA, while effectively collaborating with cross-functional teams to enhance enterprise security capabilities. Proficient in system design, implementation, and adherence to security standards and policies.

• Cisco ISE Deployment
• 802.1X Authentication
• Net Flow/IPFIX Analysis
• TCP/IP Networking
• Packet Capture and Protocol Analysis

• Cisco ISE
• Cisco SNA
• 802.1X Authentication
• MAC Authentication Bypass
• Net Flow/IPFIX
• TCP/IP
• Routing and Switching
• BGP
• OSPF
• Wireshark

• Effective Communication
• Collaboration with Technical and Non-Technical Teams

• Enterprise Security
• Threat Detection
• Behavioral Analytics
• Data Exfiltration Detection
• Insider Threat Detection

• Cisco Catalyst
• Cisco Nexus
• Skyhigh Secure Web Gateway
• Virtualization Technologies
• Datacenter Technologies