Cisco Stealthwatch SME in Cambridge, Cambridgeshire

Cambridge (Hybrid) | £500-£540 per day | Inside IR35 | 12-Month Contract

We are seeking an experienced Cisco Secure Network Analytics (SNA) Consultant to support a major network visibility and security analytics improvement programme for a leading global technology organisation.

This is an exciting opportunity for a specialist with strong Cisco SNA, NetFlow and network security analytics experience to lead the redesign, implementation and optimisation of a global monitoring environment.

You will play a key role in improving network traffic visibility, strengthening security analytics and developing a scalable, resilient architecture across a complex global network.

You will take ownership of assessing and enhancing the existing Cisco Secure Network Analytics environment, delivering a replacement platform and developing a strategy to expand NetFlow and syslog coverage across the global network.

A particular focus will be improving east-west traffic visibility across campus, data centre and cloud environments.

Cisco SNA Architecture & Implementation

• Assess the existing Cisco SNA architecture, configurations, integrations and telemetry collection.

• Design and deploy a replacement Cisco SNA infrastructure using procured hardware and software.

• Configure and optimise Flow Managers, Flow Collectors and UDP Directors.

• Migrate existing configurations and data sources, ensuring platform functionality and resilience.

• Evaluate load-balancing and high-availability solutions, including HAProxy and alternative technologies.

Network Visibility & Telemetry

• Review existing global NetFlow and syslog coverage, identifying gaps and opportunities for improvement.

• Develop strategies to improve network traffic visibility, particularly east-west traffic flows.

• Design scalable collection, forwarding and distribution architectures.

• Assess telemetry coverage across campus, data centre and hybrid cloud environments.

• Identify opportunities to automate NetFlow and syslog deployment.

Security Analytics & Optimisation

• Tune Cisco SNA security policies, behavioural analytics, alarms and detection thresholds.

• Establish traffic baselines, host groups and network classifications.

• Reduce false positives and alert fatigue while improving threat detection.

• Optimise telemetry ingestion, data retention and overall platform performance.

• Collaborate with Network Reliability Engineering and Security teams to develop meaningful monitoring use cases.

Documentation & Knowledge Transfer

• Produce architecture diagrams, technical documentation and operational procedures.

• Deliver knowledge transfer and operational handover to internal engineering teams.

• Proven experience designing, deploying and optimising Cisco Secure Network Analytics (SNA) environments.

• Strong technical knowledge of NetFlow, syslog, Flow Managers, Flow Collectors and UDP Directors.

• Experience with network traffic analytics, security monitoring and behavioural detection.

• Strong Cisco enterprise networking and network security expertise.

• Experience improving telemetry collection, network visibility and monitoring architectures.

• Ability to design scalable, resilient and highly available network analytics platforms.

• Network automation using Python, Ansible, Terraform or REST APIs.

• Automation of NetFlow and syslog configuration and deployment.

• Experience with Git and CI/CD workflows.

• HAProxy, load balancing and high-availability architectures.

• UDP traffic distribution and Flow Collector scalability.

• Hybrid cloud networking and east-west traffic monitoring.

You will be expected to deliver:

• A comprehensive assessment of the existing Cisco SNA environment.

• A redesigned and fully operational Cisco SNA platform.

• Optimised security analytics, monitoring policies and alerting.

• Improved global NetFlow and syslog coverage.

• A strategy and roadmap for enhanced east-west traffic visibility.

• Recommendations for Flow Collector load balancing and high availability.

• Complete technical documentation and knowledge transfer.

• Location: Cambridge - Hybrid working

• Rate: £500-£540 per day

• IR35 Status: Inside IR35

• Contract Length: 12 months

Interested? If you have hands-on Cisco Secure Network Analytics experience and a strong background in network visibility and security analytics, we'd be keen to hear from you.