Job description

We are the leading provider of professional services to the middle market globally, our purpose is to instill confidence in a world of change, empowering our clients and people to realize their full potential. Our exceptional people are the key to our unrivaled, culture and talent experience and our ability to be compelling to our clients. You’ll find an environment that inspires and empowers you to thrive both personally and professionally. There’s no one like you and that’s why there’s nowhere like RSM. Position Overview We are seeking a highly skilled Senior Network Security Engineer with a current Cisco Certified Network Professional – Security (CCNP Security) certification to join our team. As a Cisco Preferred partner delivering enterprise transport, security, wireless, cloud, and data center solutions, we help clients design, implement, and optimize secure, resilient networks. This position is part of a well-established network infrastructure team composed of highly experienced, certified engineers recognized for delivering complex network and security implementations. You will serve as a hands-on technical leader and trusted advisor, designing and deploying advanced network infrastructure solutions. Key Responsibilities Network Architecture & Design – Architect and document end-to-end network security solutions including next-generation firewalls, SDWAN, segmentation, secure remote access, identity-based access control, and SASE frameworks following vendor validated designs and best practices. Implementation Leadership – Lead the deployment and integration of complex security solutions including Cisco Secure Firewall, Cisco Secure Access, Cisco Umbrella, Cisco ISE, and Cisco Meraki. Network & Security Optimization – Conduct in-depth assessments of client environments, identify gaps in security posture or policy enforcement, and deliver recommendations to improve resilience, compliance, and performance. Escalation & Problem Resolution – Act as a senior escalation point for critical incidents from managed clients, providing root-cause analysis, remediation plans, and long-term corrective actions. Client Advisory & Engagement – Engage with technical and executive stakeholders to align security architectures with business objectives. Deliver technical workshops, roadmap sessions, and security assessments. Cross-Domain Collaboration – Partner with cloud, infrastructure, and managed services teams to design holistic solutions that span security, networking, and application delivery. Knowledge Sharing & Mentorship – Mentor junior engineers and contribute to internal best practices and reference architectures to elevate overall team capability. Required Qualifications Active Cisco Certified Network Professional – Security (CCNP Security) certification. 5 years of progressive experience designing, implementing, and supporting enterprise-class network and security solutions. Deep technical expertise in firewall design and deployment, network segmentation, VPN and remote access, identity services (Cisco ISE), and SSE technologies. Strong working knowledge of core routing and switching technologies. Hands-on experience with Cisco Secure Firewall (FTD/ASA), ISE, Catalyst and Nexus platforms, Meraki stack, and Secure Access/SASE solutions. Proven ability to serve as a senior technical escalation point, providing advanced troubleshooting and root cause analysis for complex client issues. Strong communication and presentation skills with the ability to engage technical and business stakeholders. Ability to travel up to 10%. This role supports U.S. government clients. Candidates must be eligible to work on U.S. government engagements and satisfy all applicable client, contractual, background screening, security, and work authorization requirements. Preferred Qualifications Consulting or professional services experience delivering enterprise network and security solutions. Familiarity with automation and infrastructure-as-code approaches (Python, Ansible, REST APIs). Experience with industrial networking and OT security technologies, including ICS/SCADA systems, Purdue Model architecture, network segmentation, and secure integration of IT and OT environments. Experience leading network segmentation or security modernization initiatives. Experience mentoring and guiding junior engineers, fostering skill development and promoting consistent best practices across the team. Experience with dynamic routing protocols (OSPF, BGP, EIGRP). Exposure to cloud security integration with AWS, Azure, or GCP. Why Join Us Join a high-performing, highly certified Infrastructure Network team within a global consulting firm where the focus is on security architecture, design, and optimization — not repetitive Tier 1/Tier 2 support. You’ll work on challenging, high-impact projects, help enterprise clients modernize their network security posture, and deepen your expertise across Cisco’s evolving security portfolio — all while collaborating with some of the most skilled engineers in the industry. At RSM, we offer a competitive benefits and compensation package for all our people. We offer flexibility in your schedule, empowering you to balance life’s demands, while also maintaining your ability to serve clients. Learn more about our total rewards at rsmus.com . All applicants will receive consideration for employment as RSM does not tolerate discrimination and/or harassment based on race; color; creed; sincerely held religious beliefs, practices or observances; sex (including pregnancy or disabilities related to nursing); gender; sexual orientation; HIV Status; national origin; ancestry; familial or marital status; age; physical or mental disability; citizenship; political affiliation; medical condition (including family and medical leave); domestic violence victim status; past, current or prospective service in the US uniformed service; US Military/Veteran status; pre-disposing genetic characteristics or any other characteristic protected under applicable federal, state or local law. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process and/or employment/partnership. RSM is committed to providing equal opportunity and reasonable accommodation for people with disabilities. If you require a reasonable accommodation to complete an application, interview, or otherwise participate in the recruiting process, please call us at 800-274-3978 or send us an email at careers rsmus.com . RSM does not intend to hire entry level candidates who will require sponsorship now OR in the future (i.e. F-1 visa holders). If you are a recent U.S. college / university graduate possessing 1-2 years of progressive and relevant work experience in a same or similar role to the one for which you are applying, excluding internships, you may be eligible for hire as an experienced associate. RSM will consider for employment qualified applicants with arrest or conviction records. For those living in California or applying to a position in California, please click here for additional information. At RSM, an employee’s pay at any point in their career is intended to reflect their experiences, performance, and skills for their current role. The salary range (or starting rate for interns and associates) for this role represents numerous factors considered in the hiring decisions including, but not limited to, education, skills, work experience, certifications, location, etc. As such, pay for the successful candidate(s) could fall anywhere within the stated range. Compensation Range: $94,400 - $178,800 Individuals selected for this role will be eligible for a discretionary bonus based on firm and individual performance.

Requirements

Must-haves

Position Overview
Implementation Leadership – Lead the deployment and integration of complex security solutions including Cisco Secure Firewall, Cisco Secure Access, Cisco Umbrella, Cisco ISE, and Cisco Meraki.
Escalation & Problem Resolution – Act as a senior escalation point for critical incidents from managed clients, providing root-cause analysis, remediation plans, and long-term corrective actions.
Client Advisory & Engagement – Engage with technical and executive stakeholders to align security architectures with business objectives. Deliver technical workshops, roadmap sessions, and security assessments.
Cross-Domain Collaboration – Partner with cloud, infrastructure, and managed services teams to design holistic solutions that span security, networking, and application delivery.
Knowledge Sharing & Mentorship – Mentor junior engineers and contribute to internal best practices and reference architectures to elevate overall team capability.
Active Cisco Certified Network Professional – Security (CCNP Security) certification.
5 years of progressive experience designing, implementing, and supporting enterprise-class network and security solutions.
Deep technical expertise in firewall design and deployment, network segmentation, VPN and remote access, identity services (Cisco ISE), and SSE technologies.
Strong working knowledge of core routing and switching technologies.
Hands-on experience with Cisco Secure Firewall (FTD/ASA), ISE, Catalyst and Nexus platforms, Meraki stack, and Secure Access/SASE solutions.
Proven ability to serve as a senior technical escalation point, providing advanced troubleshooting and root cause analysis for complex client issues.
Strong communication and presentation skills with the ability to engage technical and business stakeholders.
Ability to travel up to 10%.

Nice-to-haves

Consulting or professional services experience delivering enterprise network and security solutions.
Familiarity with automation and infrastructure-as-code approaches (Python, Ansible, REST APIs).
Experience with industrial networking and OT security technologies, including ICS/SCADA systems, Purdue Model architecture, network segmentation, and secure integration of IT and OT environments.
Experience leading network segmentation or security modernization initiatives.
Experience mentoring and guiding junior engineers, fostering skill development and promoting consistent best practices across the team.
Experience with dynamic routing protocols (OSPF, BGP, EIGRP).
Exposure to cloud security integration with AWS, Azure, or GCP.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

pythonrestawsazuregcp

Platform: workday
Effort: long