Security Deployment Engineer

Security Deployment Engineer Cisco Security Business Group (SBG) is looking for a Security Deployment Engineer in a customer-facing role that focuses on technical leadership, two-way advocacy, and expertise across our security portfolio. This role combines deep networking and security knowledge with the ability to represent engineering to customers and customers to engineering. Cisco offers a comprehensive end-to-end security portfolio covering on-premises, cloud, on-device, and hybrid environments - including VPN, zero trust, web inspection in the cloud, firewall, CASB, and DLP. This flexibility allows customers to select solutions tailored to their needs and transition seamlessly as requirements evolve. Location Japan-based role. You work from Japan, supporting Japanese enterprise customers in their timezone, with coordination across our English - speaking engineering organization. Role Day-to-day two-way liaison for Japanese enterprise accounts. You represent engineering to the customer and the customer to engineering - with strong customer advocacy throughout. You triage issues, coordinate with our English - speaking engineering team, and translate updates Japanese - English with technical accuracy on both sides, and lead technical incident discussions with Japanese enterprise customers, ensuring clear communication and proactive management to meet and exceed their expectations. Two-way liaison - To the customer: relay engineering status, workarounds, and fix guidance in Japanese; help them understand what is happening and what to expect next. - To engineering: capture customer symptoms, environment details, business impact, and urgency in English ; ensure tickets reflect what production actually needs. - Keep both sides in sync during open escalations - no surprises on either end. - Advocate for the customer: ensure their impact, urgency, and operational needs are heard clearly by engineering. Key responsibilities - Lead technical incident discussions for Japanese enterprise accounts, ensuring timely resolution and high customer satisfaction. - Participate in an on-call rotation to provide critical support and ensure high availability for our enterprise customers as needed. - Own L2/L3 troubleshooting on VPN, zero trust access, web inspection in the cloud, CASB, DLP, firewall policy, and AWS/Kubernetes connectivity. - Collect and analyze logs, packet captures, and metrics; build clear escalation packages for engineering and customer-ready summaries from the same facts. - Support packet capture and basic packet analysis to narrow IPsec tunnel, IPv4/IPv6, DNS, routing, TLS, and policy-related issues before senior escalation. - Run scripted health checks (Bash/Python): tunnel/IPsec status, DNS paths, IP pool utilization. - Capture customer configurations and run daily regression checks to confirm everything is working as intended - surfacing issues before they affect the customer environment. - Assist upgrades and migrations: pre-checks, smoke tests, rollback planning, and bilingual customer communication. - Use AI tools to speed up log review - always validate before sharing with customer or engineering. - Document runbooks, known issues, and customer-specific architecture notes. Minimum qualifications Fluent Japanese and English for technical communication (written and spoken). Comfortable speaking for both sides: customer-facing updates and engineering-facing escalation write-ups from the same incident. Strong customer advocacy - you represent the customer's interests credibly while staying factually accurate with engineering. 5-7 years in network/security operations, customer support engineering, or professional services. Solid TCP/IP (IPv4/IPv6), DNS, routing, NAT, IPsec tunnels, and TLS fundamentals. Familiarity with AWS basics: VPC, subnets, security groups, CloudWatch, hybrid connectivity. Packet capture familiarity (Wireshark/tcpdump) and structured troubleshooting. Experience with cloud container technologies such as Kubernetes: deployments, services, scaling, basic kubectl troubleshooting. Working knowledge of one or more of the following technologies: VPN, zero trust, web inspection in the cloud, CASB, DLP, and firewall policy. Bash scripting; Python a plus. Preferred qualifications - Hands-on experience with Cisco on-prem or cloud security/networking products. - Prior TAC, PS, or customer engineering role for SASE or enterprise security vendors. - Observability exposure (Grafana, Loki, Prometheus or similar). Our mission: make security management easy, reliable, and effective for our customers. Values: "Being kinder than necessary" | "Learning together" | "Engineering the business" | Celebrating diversity of perspectives Growth path High performers deepen ownership of strategic accounts, lead two-way RCAs, and mentor peers on balancing customer and engineering viewpoints. Summary A Security...