JD – LAB Resiliency - Network Architect and ISE trust Sec- 1 FTE
 
Design & Deployment of Palo Alto PA-440 firewalls in Active/Passive HA for site and Network setup.
Include configuration and validation of HA (sync, failover).
Enable and configure Core Security Subscriptions
Enable IoT Security subscription for device discovery, profiling, and risk visibility.
Implement security zoning for R&D, Lab/Test, IoT/OT, Shared Services, and Internet following least-privilege.
Cisco ISE TrustSec for SGT-based micro segmentation (Inline Tagging or SXP).
Configuration of Catalyst switches related to ISE trust Sec SGT/policies.
Onboard and manage firewalls via, Panorama, Palo Alto Strata Cloud Manager.
Integrate firewall logs with Splunk SIEM
Perform end-to-end testing (HA, security policies, TrustSec enforcement, logging).
Provide as-built documentation, runbooks, and handover to operations.
Configure and setup dot1x/MAB authentication on swi...