Senior Security Consultant – Cisco ISE with AWS Cloud Architecture
Core
Designing, building, and owning the complete AWS foundation for a Cisco ISE-as-a-Service multi-tenant managed service.
Role type
Senior IC AWS Cloud Architect (Multi-tenant SaaS)
Builds
Multi-account AWS Organization, tenant network architecture, security guardrails, and Infrastructure-as-Code modules.
Domain
Cloud Infrastructure + Network Security
Deliverable
production ML models | product features | infrastructure
Required skills
AWS multi-account architecture, Terraform module authoring, AWS networking (Transit Gateway, VPC, Direct Connect), cloud cost management, security guardrails (SCPs, IAM), reliability engineering, policy-as-code
Preferred skills
Cisco ISE, RADIUS, enterprise NAC concepts, AWS Advanced Networking/Security certifications, MSP experience, Python/Bash scripting
Technologies
AWS Organizations, Control Tower, Terraform, Transit Gateway, Route 53, KMS, CloudTrail, Security Hub, Cisco ISE, Ansible
Responsibilities
Design multi-account AWS Organization structure with OUs and management account separation; Enforce Service Control Policies (SCPs) for tenant isolation; Design tenant network architecture including VPC, subnets, and IPAM; Implement AWS Transit Gateway hub-and-spoke connectivity with Site-to-Site VPN and Direct Connect; Implement AWS security services (IAM, KMS, GuardDuty, Security Hub); Own cloud cost management and FinOps including per-tenant chargeback reporting; Design for high availability and disaster recovery across AZs and regions; Apply reliability engineering practices to reduce operational toil; Implement policy-as-code and security scanning in CI/CD pipelines; Manage Cisco ISE AMI listing on AWS Marketplace; Verify and manage AWS service quotas per Region/tenant; Configure Network ACLs and Elastic IP allocation policies; Enable VPC Flow Logs for compliance; Configure EC2 instance metadata options and hardening attributes; Own EC2 user-data/bootstrap configuration for ISE AMI; Define NTP source design for ISE nodes; Own end-to-end AWS infrastructure validation checklist at tenant go-live.
Seniority
Senior, hands-on IC
