Network Security Engineer - 3 Months Contract

Position: Network Security Engineer
Contract Type: 3-Month Contract (Renewable)
Based in: Kuala Lumpur, Malaysia

We are seeking an experienced Network Security Engineer to join our client's team on a 3-month contract based in Kuala Lumpur, Malaysia.

The successful candidate will be responsible for supporting, maintaining, configuring and troubleshooting enterprise network security infrastructure, with a strong focus on Cisco security technologies, firewall infrastructure, network connectivity, VPN, identity and access management, and perimeter security.

This is a hands-on technical role suited to an engineer who can quickly understand an existing network and security environment, troubleshoot complex technical issues, and work independently across multiple concurrent tasks. The ideal candidate will have strong practical experience with Cisco ASA, Cisco FTD/Firepower and/or Cisco ISE, together with solid networking fundamentals covering LAN switching, routing, NAT, VPNs, security zones, AAA and network access control.

Due to the short contract duration, candidates should be able to contribute with minimal ramp-up time and have recent hands-on experience with enterprise network security environments.

Key Responsibilities

• Configure, maintain and troubleshoot enterprise network security infrastructure.
• Support Cisco ASA, FTD, Firepower, ISE and/or AnyConnect environments.
• Troubleshoot firewall policies, NAT, security zones and VPNs.
• Support network security incidents and perform root-cause analysis.
• Support LAN switching, routing, Cisco routers and switches.
• Troubleshoot internet-edge and perimeter security infrastructure.
• Support high availability and firewall failover environments.
• Configure and troubleshoot Cisco ISE, including policy management and profiling.
• Support AAA technologies including TACACS+, RADIUS and 802.1X.
• Support EAP-TLS, EAP-PEAP, BYOD and Guest Network environments.
• Work with Cisco and third-party network/security technologies.
• Manage multiple technical tasks including system integration and complex troubleshooting.
• Prepare technical documentation and communicate solutions effectively to stakeholders.

Mandatory Requirements

• Hands-on experience with LAN switching and routing.
• Experience with at least two Cisco security products, including:
  • Cisco ASA
  • Cisco FTD
  • Cisco Firepower
  • Cisco ISE
  • Cisco ESA
  • Cisco WSA
  • Cisco AnyConnect
• Strong knowledge of NAT, security zoning, VPNs and identity management.
• Strong understanding of network perimeter security design.
• Strong troubleshooting skills in enterprise network security environments.
• Excellent written, verbal and presentation skills.
• CCNA certification is mandatory.

Good to Have

• CCNP.
• Deep Cisco ASA/FTD troubleshooting experience.
• Cisco ISE policy management and profiling.
• Firewall HA/failover experience.
• Internet-edge security experience.
• Strong knowledge of TACACS+, RADIUS, 802.1X, EAP-TLS and EAP-PEAP.
• BYOD and Guest Network experience.
• Cisco and third-party routers, switches and network management platforms.
• Shell, Perl or XML scripting experience.
• CEH, CISSP or OSCP.