Senior Network Security Engineer, Active CCNP Security Required

RSM US LLP

. Architect and document end-to-end network security solutions, including next-generation firewalls, SD-WAN, segmentation, secure remote access, identity-based access control, and SASE frameworks .

Posted 10/13/2026full-timeUnited StatesSenior💰 $94,400 - $178,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and implementing enterprise-class network security solutions, including next-generation firewalls and secure access frameworks. Proven ability to assess security postures, provide advanced troubleshooting, and mentor junior engineers while aligning security architectures with business objectives.

Highest-signal resume keywords

Cisco Certified Network Professional – Security (CCNP Security)Firewall Design and DeploymentCisco Secure Firewall (FTD/ASA)Network SegmentationRoot Cause Analysis

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network Security SolutionsVPN and Remote AccessCisco ISE Identity ServicesSSE TechnologiesCore Routing and Switching TechnologiesOSPFBGPEIGRPPythonAnsible

Soft Skills

Strong Communication SkillsPresentation SkillsMentoring

Tools & Technologies

Cisco Secure AccessCisco UmbrellaCisco MerakiCatalyst and Nexus PlatformsAWSAzureGCP

Certifications & Qualifications

Cisco Certified Network Professional – Security (CCNP Security)

Industry Keywords

Network SegmentationICS/SCADAPurdue Model ArchitectureIT/OT IntegrationSecurity Modernization Initiatives

Tech Stack

Tools & technologies

AnsibleAWSAzureCloudFirewallsGoogle Cloud PlatformPythonSwitching

About the role

Key responsibilities & impact

Architect and document end-to-end network security solutions, including next-generation firewalls, SD-WAN, segmentation, secure remote access, identity-based access control, and SASE frameworks
Lead deployment and integration of Cisco Secure Firewall, Cisco Secure Access, Cisco Umbrella, Cisco ISE, and Cisco Meraki
Assess client environments, identify security posture and policy-enforcement gaps, and recommend improvements to resilience, compliance, and performance
Serve as senior escalation point for critical managed-client incidents
Provide root-cause analyses, remediation plans, and long-term corrective actions
Engage technical and executive stakeholders to align security architectures with business objectives
Deliver technical workshops, roadmap sessions, and security assessments
Collaborate with cloud, infrastructure, and managed services teams on security, networking, and application-delivery solutions
Mentor junior engineers
Contribute to internal best practices and reference architectures
Design, implement, and optimize secure, resilient enterprise network infrastructure for clients

Requirements

What you’ll need

Active Cisco Certified Network Professional – Security (CCNP Security) certification
5+ years of progressive experience designing, implementing, and supporting enterprise-class network and security solutions
Deep technical expertise in firewall design and deployment, network segmentation, VPN and remote access, Cisco ISE identity services, and SSE technologies
Strong working knowledge of core routing and switching technologies
Hands-on experience with Cisco Secure Firewall (FTD/ASA), ISE, Catalyst and Nexus platforms, Meraki stack, and Secure Access/SASE solutions
Proven ability to serve as a senior technical escalation point, providing advanced troubleshooting and root cause analysis
Strong communication and presentation skills with technical and business stakeholders
Ability to travel up to 10%
Eligibility to work on U.S. government engagements and satisfy applicable client, contractual, background screening, security, and work authorization requirements
Consulting or professional services experience (preferred)
Familiarity with Python, Ansible, and REST APIs (preferred)
Experience with industrial networking and OT security technologies, including ICS/SCADA, Purdue Model architecture, network segmentation, and secure IT/OT integration (preferred)
Experience leading network segmentation or security modernization initiatives (preferred)
Experience mentoring and guiding junior engineers (preferred)
Experience with OSPF, BGP, and EIGRP (preferred)
Exposure to AWS, Azure, or GCP cloud security integration (preferred)

Benefits

Comp & perks

Flexible schedule
Discretionary bonus based on firm and individual performance
Competitive benefits and compensation package
Accommodation for applicants with disabilities
Professional development through challenging, high-impact projects and collaboration with highly skilled engineers