Cisco ISE Lead & NAC Engineer

Cisco Systems, Inc.

Santa Clara, CA, United States

2 days ago

Apply on www.dice.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

5 years minimum

Working hours

Regular working hours

Job source

www.dice.com

Tech stack

Microsoft Access IEEE 802.1X Active Directory Border Gateway Protocol Catalyst (Software) Profiling Cyber Security Computer Networks Enhanced Interior Gateway Routing Protocol EtherChannel Hot Standby Router Protocol Python (Programming Language)

+24 more

Multicasting Network Architecture Routing Open Shortest Path First (OSPF) Performance Tuning Public Key Infrastructure Ansible Zero Trust Network Access Security Information and Event Management Virtual Local Area Networks Virtual Router Redundancy Protocols Wide Area Networks Wireless Networks Wireless LAN Controllers Identity Services Engine Network Access Control Infrastructure Automation Frameworks Information Technology Routing & Switching TACACS+ Protocol Restful APIs Open Network Automation Platform Cisco Switches Cisco

Job description

Network Access Control (NAC) & Security Architecture: Design, deploy, and support enterprise-wide Cisco ISE solutions for AAA, 802.1X, MAB, device profiling, posture assessment, and guest access services. Integrate ISE with Active Directory, PKI/Certificates, MDM, and SIEM tools.
Enterprise Wireless Engineering: Architect and optimize wireless infrastructure using Cisco Catalyst Wireless LAN Controllers (WLCs), supporting WPA2/WPA3, RF tuning, QoS, high-density environments, and ISE wireless onboarding.
Core Routing & Switching Operations: Manage enterprise LAN/WAN infrastructure on Cisco Catalyst 9K platforms. Configure and troubleshoot OSPF, BGP, EIGRP, VLANs, STP/RSTP, EtherChannel, HSRP/VRRP, and Multicast.
Modernization & SDA Integration: Drive transition toward Zero Trust architectures, Cisco DNA Center (DNAC), and Software Defined Access (SDA) fabric deployments.
Automation & Engineering Leadership: Lead cross-functional network projects, develop automated workflows using Python/Ansible/REST APIs, and provide Tier-3 escalation support and root-cause analysis for network outages.

Requirements

Role Overview: We are seeking a senior Network Infrastructure & Security Lead with 8+ years of enterprise network engineering experience and 5+ years of hands-on leadership in Cisco Identity Services Engine (ISE) and Network Access Control (NAC) deployments. In this role, you will architect, implement, and secure enterprise network access across wired, wireless, and cloud interfaces while leading network modernization, 802.1X policy enforcement, and infrastructure automation., * Experience Required: 8+ Years Enterprise Network Engineering

5+ Years Cisco ISE & NAC

Core Specialty: Cisco ISE (AAA, 802.1X, MAB, Posture, Profiling), Enterprise Wireless (Catalyst WLCs), Layer 2/3 Routing & Switching
Advanced Architecture: Cisco DNA Center, SDA Fabric, Zero Trust, Network Automation (Python, Ansible), * 8+ years of progressive experience in enterprise network engineering.
5+ years of dedicated, hands-on experience designing and operating Cisco ISE and NAC environments.
Deep technical expertise in 802.1X, RADIUS, TACACS+, AAA protocols, Active Directory integration, and PKI/EAP-TLS certificate architectures.
Strong hands-on experience with Cisco Catalyst 9K switches, Cisco WLCs, and routing protocols (BGP, OSPF, EIGRP).
Bachelor s degree in Computer Science, IT, Engineering, or equivalent experience.

Preferred Certifications & Skills:

Cisco certifications: CCNP Security, CCNP Enterprise, or CCIE.
Hands-on experience with Cisco DNA Center (DNAC), Software-Defined Access (SDA), and Python / Ansible network automation.