Network Engineer III

IDEMIA Public Security, a division of IDEMIA Group, is the leading provider of secure and trusted biometric-based solutions, transforming public and private organizations across the globe. Our industry-enabled and client-specific solutions draw upon decades of expertise in biometrics to revolutionize the fields of public security, justice and public safety, travel and transport, identity, and access control. Built on privacy and trust, our market-leading iris, fingerprint and facial recognition solutions top independent benchmarking for accuracy, fairness and scalability. These exacting standards enable our clients to build safer, fairer societies where people can live, interact, and move about freely. With 4000+ employees around the world and 150+ partners worldwide, we offer more than just a job - we provide a dynamic environment where innovation thrives, opportunities abound, and your talents are valued. Be part of a global leader shaping the future of biometric based technology. Learn more here.

The Network Engineer will design, implement, and support a secure, scalable, and resilient enterprise network environment. This role focuses on core Cisco networking technologies and strong firewall policy expertise to maintain a robust security posture while supporting business growth. The engineer will be responsible for managing switching, routing, network access control, firewalls, SD WAN, and monitoring platforms across a hybrid environment. This position requires hands on technical depth, proactive problem solving, and the ability to collaborate across teams to ensure a reliable and secure network infrastructure.

Responsibilities include configuring and optimizing Cisco Catalyst Center–managed networks, Cisco FMC/FTD firewalls, Cisco ISE for network access and segmentation, and SD WAN connectivity. The engineer will also participate in firewall policy management, network troubleshooting, system upgrades, and the implementation of new technologies. Additional duties include maintaining documentation, ensuring compliance with security standards, supporting capacity planning, and contributing to the continuous improvement of network services. 

• Configure, monitor, and troubleshoot Cisco Catalyst switches, ISR/C8000 routers, and 9800 WLCs
• Support SD-WAN fabric operations — template management, tunnel troubleshooting, circuit turn-ups — under senior guidance
• Process Firepower FTD/FMC rule requests and NAT changes
• Execute software upgrades, patch management cycles, and hardware RMAs
• Monitor network health via SNMP, syslog, and Catalyst Center; triage and escalate alerts
• Maintain accurate documentation: topology diagrams, IP addressing, change records
• Participate in change management processes and scheduled maintenance windows
• Own network support tickets through resolution or escalation
• Other duties as required and assigned.

Requirements

• Strong hands on experience with Cisco networking platforms (routers, switches, Catalyst Center). 
• Proven expertise with firewall policy design, implementation, and general firewall best practices.
• Experience with Cisco FMC/FTD firewalls, including rulebase management, IPS/AMP, and troubleshooting.
• Strong understanding of Cisco ISE (802.1x, TACACS+, segmentation, posture).
• Working knowledge of Cisco SD WAN deployment and operations. Proficiency with routing (BGP, OSPF), VPNs, QoS, and Layer 2/Layer 3 architectures.
• Experience maintaining and troubleshooting enterprise network infrastructures.
• Experience with Palo Alto Global Protect & Prisma Access.
• Ability to produce clear network documentation and follow change control processes.
• Strong analytical and problem solving skills.
• Ability to work independently and handle complex issues. 
• Excellent verbal and written communication skills.

Nice to Have

• Familiarity with Cisco Security Cloud.
• Hands on knowledge of Nexus Dashboard.
• Thousand Eyes deployment/monitoring experience.
• Cloud networking exposure (Azure or AWS).
• Basic python experience.

Note to third-party recruiters: IDEMIA Public Security does not work with third-party recruiters absent a signed agreement and will treat any resumes submitted without a signed agreement as the property of IDEMIA Public Security. In the event that IDEMIA Public Security hires a candidate who was brought to our attention by a recruiter who does not have a signed agreement, IDEMIA Public Security will not pay any fees to the recruiter as a result of the hire.