Description
Cisco Security Business Group (SBG) is looking for a Security Deployment Engineer in a customer-facing role that focuses on technical leadership, two-way advocacy, and expertise across our security portfolio.
This role combines deep networking and security knowledge with the ability to represent engineering to customers and customers to engineering.
Cisco offers a comprehensive end-to-end security portfolio covering on-premises, cloud, on-device, and hybrid environments - including VPN, zero trust, web inspection in the cloud, firewall, CASB, and DLP.
Location Japan-based role. You work from Japan, supporting Japanese enterprise customers in their timezone, with coordination across our English-speaking engineering organization.
Role Day-to-day two-way liaison for Japanese enterprise accounts. You represent engineering to the customer and the customer to engineering - with strong customer advocacy throughout.
Key Responsibilities
- Lead technical incident discussions for Japanese enterprise accounts, ensuring timely resolution and high customer satisfaction.
- Participate in an on-call rotation to provide critical support and ensure high availability for our enterprise customers as needed.
- Own L2/L3 troubleshooting on VPN, zero trust access, web inspection in the cloud, CASB, DLP, firewall policy, and AWS/Kubernetes connectivity.
- Collect and analyze logs, packet captures, and metrics; build clear escalation packages for engineering and customer-ready summaries from the same facts.
- Support packet capture and basic packet analysis to narrow IPsec tunnel, IPv4/IPv6, DNS, routing, TLS, and policy-related issues before senior escalation.
- Run scripted health checks (Bash/Python): tunnel/IPsec status, DNS paths, IP pool utilization.
- Capture customer configurations and run daily regression checks to confirm everything is working as intended - surfacing issues before they affect the customer environment.
- Assist upgrades and migrations: pre-checks, smoke tests, rollback planning, and bilingual customer communication.
- Use AI tools to speed up log review - always validate before sharing with customer or engineering.
- Document runbooks, known issues, and customer-specific architecture notes.
Minimum Qualifications
- Fluent Japanese and English for technical communication (written and spoken).
- Comfortable speaking for both sides: customer-facing updates and engineering-facing escalation write-ups from the same incident.
- Strong customer advocacy - you represent the customer's interests credibly while staying factually accurate with engineering.
- 5-7 years in network/security operations, customer support engineering, or professional services.
- Solid TCP/IP (IPv4/IPv6), DNS, routing, NAT, IPsec tunnels, and TLS fundamentals.
- Familiarity with AWS basics: VPC, subnets, security groups, CloudWatch, hybrid connectivity.
- Packet capture familiarity (Wireshark/tcpdump) and structured troubleshooting.
- Experience with cloud container technologies such as Kubernetes: deployments, services, scaling, basic kubectl troubleshooting.
- Working knowledge of one or more of the following technologies: VPN, zero trust, web inspection in the cloud, CASB, DLP, and firewall policy.
- Bash scripting; Python a plus.
Preferred Qualifications
- Hands-on experience with Cisco on-prem or cloud security/networking products.
- Prior TAC, PS, or customer engineering role for SASE or enterprise security vendors.
- Observability exposure (Grafana, Loki, Prometheus or similar).