To Apply for this Job Click Here
Job Ref: 15143
Salary: $0 – $
Cisco (CCIE) Temp Consultant bilingual Chinese (Hybrid)
Location: Manhattan, NY (Hybrid – 3 days onsite / 2 remote) with a financial institution
Duration: 4 Months
Primary Responsibilities:
This is a hands-on CCIE-level role requiring expert experience in enterprise network architecture, implementation, troubleshooting, optimization, and security.
Lead and execute the following key projects and responsibilities:
- Design and implement the migration from the existing Cisco firewall environment to the new Sophos firewall platform, including firewall policies, NAT, routing, VPN, IPS, network segmentation, testing, rollback planning, and documentation.
- Design and implement a secure WAF and SSL offloading solution for Internet-facing applications, including DMZ architecture, certificate management, traffic flows, high availability, security policies, and integration with the edge firewall.
- Assess and enhance the existing Cisco ISE deployment, expanding its use beyond MAB through improved endpoint profiling, 802.1X authentication, authorization policies, posture assessment, network segmentation, logging, and operational monitoring.
- Evaluate, select, and support the implementation of a new enterprise MFA solution, including requirements analysis, product comparison, architecture design, integration with Active Directory, VPN, network devices, and critical applications, testing, rollout planning, and documentation.
- Assess and improve the existing SolarWinds Orion NPM deployment, including device coverage, alerting, performance thresholds, network visibility, capacity monitoring, reporting, and integration with operational and security processes.
- Review and improve the enterprise network architecture across multiple sites, ensuring security-by-design, network segmentation, high availability, redundancy, fault tolerance, and operational resiliency.
- Apply security-hardening standards and secure configuration baselines to firewalls, routers, switches, VPN systems, and network-management platforms.
- Review and optimize firewall ACLs, NAT rules, network objects, and security policies by identifying and removing overly permissive, unused, duplicate, obsolete, and shadowed rules.
- Evaluate and introduce new products and technologies to strengthen network infrastructure, security, or improve productivity.
- Collaborate with the existing Network Administrator and provide technical guidance, documentation, and knowledge transfer for all implemented solutions.
Qualifications Required
- Active CCIE Enterprise Infrastructure or CCIE Security certification is required.
- 8 years of hands-on enterprise network engineering and architecture experience in complex, multi-site environments.
- Experience working in banking, financial services, or another regulated environment is strongly preferred.
- Ability to perform occasional off-hours and weekend work as required.
- Candidate with bilingual (English and Chinese) skills is required.
Experience with network security, firewall management, and enterprise infrastructure Familiarity with Windows Server and Active Directory environments
Ability to work independently and support off-hours maintenance when needed
Must be able to describe recent troubleshooting or configuration cases, including the “steps” you performed.
Explain “HOW” you completed the tasks, including your approaches/tools/commands used during the process.
This role requires unrestricted U.S. work authorization. Employer sponsorship is not available.
ACG Resources and our client partners are equal opportunity employers. All qualified applicants will receive consideration without regard to protected characteristics.
Must be available to work in the specified job location
To apply, please contact Franca Diona
Email: Franca@acgresources.com
Phone number: 646-442-2272
#acgresourcesjobs