{"id":4217531,"url":"https://alion.io/job/insight-senior-cisco-security-engineer","title":"Senior Cisco Security Engineer","company":{"id":2556,"name":"Insight","domain":"insight.com","url":"https://alion.io/company/insight","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"B","score":81,"open_postings":20,"ghost_share":0.1,"stale_share":0.45,"repost_share":0.15,"time_to_fill_p50_days":40,"computed_at":"2026-11-12T10:38:37Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Francisco, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agile","optional":false},{"name":"Ansible","optional":false},{"name":"CI/CD","optional":false},{"name":"Confluence","optional":false},{"name":"DNS","optional":false},{"name":"Git","optional":false},{"name":"Jira","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Scrum","optional":false},{"name":"ServiceNow","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zscaler","optional":false},{"name":"GitOps","optional":true}],"status":"live","first_seen_at":"2026-10-29T19:46:45Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T03:16:44Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"Requisition Number: 106888\nSenior Cisco Security Engineer\nSalary: Dependent on experience, the salary is up to 175k a year + full benefits\nTravel: 25% of travel to client sites is required\n*Seeking candidates that reside in the western region of the United States**\nAbout the role\nInsight delivers managed infrastructure, operations and security services for some of the most recognizable brands in North America. Many of the large enterprise clients we support are moving IT operations from reactive, ticket-driven support to a product-aligned platform engineering model, where platforms are treated as products, work is planned in sprints, and anything that can be declared, verified, and remediated is automated. We are adding a senior security engineer to our managed Platform Engineering team to close a critical skill gap across Cisco Systems security stack and to build security directly into the platform design and release cycle.\nAlong the way, you will get to:\nServe as the program’s subject-matter expert and engineer for Cisco security platforms: Cisco Umbrella, Cisco Secure Access, Cisco Secure Firewall / Firepower (FMC and FTD), and Cisco Identity Services Engine (ISE). \nLead the security engineering for the Umbrella-to-Cisco Secure Access migration, including DNS-security policy migration, Secure Client rollout, lab/pilot/production validation, and working with Cisco Lifecycle Services resources. \nSupport evaluation and migration of on-premises Firepower Management Center to cloud-delivered FMC via Cisco Security Cloud Control, and of FTD remote-access VPN to Secure Access VPNaaS. \nSupport ISE engineering and roll-out program: policy design, posture and profiling, network access control, upgrades and patching, and contribution to ISE Phase 2 project work. \nDrive secure lifecycle management of the Cisco security stack: assess Cisco PSIRT advisories, plan and execute upgrades and patches, and keep configurations aligned to best practice. \nAct as a contributing engineer to the Platform Engineering code base: build automation, infrastructure-as-code and policy-as-code that codifies security standards and recurring maintenance for the Cisco platforms, and ship it through the team's feature release cadence. \nTranslate security policies and requirements set by Insight's Managed Security team into implemented, codified controls on deployed platforms; be the bridge between security operations and the infrastructure/platform teams. \nPlan and track security engineering work in the authoritative ticket management system as part of two-week sprints; document designs, standards and runbooks. \nContribute to platform design reviews so new features and services are secure by design. \nContribute to identity and access management improvements (ISE, Duo, Active Directory / Microsoft Entra ID) as the client's identity program matures. \nBe AmbITious: This opportunity is not just about what you do today but also about where you can go tomorrow. When you bring your hunger, heart, and harmony to Insight, your potential will be met with continuous opportunities to upskill, earn promotions, and elevate your career.\nWhat we’re looking for:\n7+ years in network or security engineering, with at least 3 years hands-on engineering (design, deployment, migration, not just administration) of enterprise Cisco security products. \nDeep, hands-on experience with Cisco ISE (802.1X, MAB, posture, profiling, TACACS+, pxGrid, policy sets, distributed deployments, upgrades). \nHands-on experience with Cisco Secure Firewall / Firepower (FMC and FTD): access control and intrusion policy, NAT, remote-access VPN, HA, upgrades. \nWorking experience with Cisco Umbrella and/or Cisco Secure Access (DNS security, SWG, ZTNA/SSE) or a comparable SASE/SSE platform such as Palo Alto Prisma or Zscaler. \nAutomation and coding skills: Python plus at least one of the following: Ansible or Terraform. Comfortable working with REST APIs (FMC, ISE, Umbrella/Secure Access APIs). \nWorking knowledge of Git-based workflows and CI/CD pipelines; experience contributing to a shared code base with code review. \nExperience working in Agile/Scrum teams using Jira, Confluence, and/or ServiceNow. \nStrong written and verbal communication; able to work directly with client engineering leaders. \nPreferred qualifications:\nIdentity and access management experience: Microsoft Entra ID / Active Directory, Cisco Duo MFA, conditional access, privileged access management, identity governance. \nCisco Security Cloud Control, cloud-delivered FMC, or Secure Access VPNaaS migration experience. \nCisco Secure Network Analytics (Stealthwatch), Cisco ThousandEyes, or Cisco Secure Endpoint. \nFamiliarity with OT/manufacturing network environments, or willingness to learn. \nUnderstanding of platform engineering, SRE, GitOps or DevSecOps frameworks. \nCertifications: CCNP Security, CCIE Security, Cisco ISE / SCOR / SNCF specialist; CISSP or similar a plus. \nManaged services or client-facing consulting experience. \nPalo Alto experience preferred.\nInsight is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation or any other characteristic protected by law.\n Insight does not accept unsolicited resumes from recruiters or employment agencies. Unsolicited resumes will be treated as direct applications from the candidate, and recruiters or agencies who submit candidates for this position without a prior, written vendor agreement will not be eligible for any form of compensation, even if the candidate is hired.\nPosting Notes: San Francisco || California (US-CA) || United States (US) || Engineering || None || Remote ||","description_format":"text","description_chars":5788,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Managed IT Services (MSP)","Systems Integrators","Cloud Consulting & Migration","IT Resellers & VARs"],"lifecycle":[{"event":"open","at":"2026-11-13T03:16:44Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 5","filings_12m":5,"filings_prev_12m":4,"green_card_filings_12m":0,"median_offered_wage_usd":111500,"route":null,"cap_exempt":false,"checked_at":"2026-11-12T07:36:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":0.9,"age_days":14,"expected_fill_days":40,"reasons":["conf:2","win:mid","comp:brand"],"computed_at":"2026-11-13T05:36:48Z"},"pay":null,"html_url":"https://alion.io/job/insight-senior-cisco-security-engineer","json_url":"https://alion.io/job/insight-senior-cisco-security-engineer.json","meta":{"generated_at":"2026-11-13T05:36:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11833,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2556},"rest":"https://alion.io/mcp/rest/get_company?id=2556"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Finsight-senior-cisco-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Finsight-senior-cisco-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Finsight-senior-cisco-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/insight-senior-cisco-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Finsight-senior-cisco-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4217531}},{"tool":"search_jobs","arguments":{"company":"insight.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4217531},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}