> Markdown version of [/jobs/ext/381473-cisco-ise-engineer](https://www.wearedevelopers.com/jobs/ext/381473-cisco-ise-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cisco ISE Engineer - **Company:** Leidos - **Location:** Stuttgart, Germany - **Experience:** Experienced - **Salary:** €87,100.0 - €157,450.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, IEEE 802.1X, Access Control List, Access Network, Active Directory, User Authentication, Catalyst (Software), Profiling, Cyber Security, Identity and Access Management, Networking Hardware, Virtual Private Networks (VPN), Python (Programming Language), Lightweight Directory Access Protocols (LDAP), Network Segmentation, Node.Js, Public Key Infrastructure, Role-Based Access Control, Zero Trust Network Access, Security Information and Event Management, Systems Integration, Terminal Access Controller Access-Control System (TACACS), Scripting, Identity Services Engine, Network Access Control, Restful APIs, PSN, Cisco - **Published:** June 4, 2026 - **Apply:** https://de.indeed.com/viewjob?jk=af659ba782431fe4 ## About the Role To satisfy the Technical Expert criteria, candidates must meet one of the following education/experience paths: * Bachelor's Degree in a technical discipline plus 3+ years of relevant technical experience. * Associate's Degree in a technical discipline plus 7+ years of relevant technical experience. * A minimum of 11+ years of specialized, relevant technical experience in lieu of a degree. Additional Core Requirements: * Clearance: Must possess an active Top Secret security clearance. * Compliance: Must meet DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE). * Specialized Expertise: Minimum of 5 years of hands-on engineering experience dedicated to Cisco ISE, NAC, and AAA protocols. * Protocol Mastery: Deep understanding of RADIUS, TACACS+, EAP protocols (specifically EAP-TLS and TEAP), and PKI certificate lifecycles., * Specific Cisco Certifications such as CCNP Security (specifically the SISE 300-715 exam) or CCIE Security. * Familiarity with the DoD Zero Trust Strategy and related architecture pillars. * Experience with Cisco DNA Center (Catalyst Center) and Software-Defined Access (SDA) integrations. * Scripting experience using Python or REST APIs for automating ISE policy deployments and endpoint management. If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares. ## Description We are seeking an expert-level Cisco ISE Subject Matter Expert to support the U.S. Africa Command (AFRICOM) mission. This role serves as the primary technical authority for a large-scale, distributed Cisco ISE deployment. The focus is on securing the DoD enterprise network through advanced Identity and Access Management, Zero Trust architecture, and endpoint compliance. The successful candidate will ensure secure, policy-driven access across a highly classified, globally dispersed infrastructure, serving as the cornerstone for the command's Zero Trust transformation., * Zero Trust Architecture (ZTA) Execution: Architect and deploy Zero Trust Network Access (ZTNA) principles using Cisco ISE to strictly enforce least-privilege access across the enterprise network. * Continuous Trust Verification: Develop and maintain dynamic, context-aware access policies that continuously evaluate user identity, device posture, location, and telemetry before granting or maintaining network access. * Micro-Segmentation for ZTA: Engineer and maintain Cisco TrustSec, Security Group Tags (SGTs), and Security Group Access Control Lists (SGACLs) to contain lateral movement and enforce granular network segmentation. * DoD ZT Alignment: Ensure all ISE integrations directly support the "Identity" and "Device" pillars of the DoD Zero Trust Reference Architecture. * ISE Architecture: Design, deploy, and manage multi-node, distributed Cisco ISE deployments including Policy Administration (PAN), Monitoring (MnT), Policy Service (PSN), and pxGrid nodes. * Network Access Control: Implement and troubleshoot 802.1X, MAC Authentication Bypass (MAB), and WebAuth across enterprise wired, wireless, and VPN infrastructures. * Device Administration: Manage TACACS+ for centralized network device administration and strict role-based access control (RBAC). * Endpoint Profiling & Posture: Configure advanced endpoint profiling and deep posture assessments to ensure only compliant DoD devices can connect to mission-critical enclaves. * Integrations: Integrate ISE with external identity stores (Active Directory, LDAP), Public Key Infrastructure (PKI), Mobile Device Management (MDM), and SIEM platforms. * Mission Support: Perform complex packet-level troubleshooting (RADIUS, EAP-TLS, EAP-TEAP) to resolve authentication failures and ensure continuous AFRICOM mission readiness. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Stop using Node.js like in 2020! What changed and what you can do today with Node.js](https://www.wearedevelopers.com/videos/100011-stop-using-node-js-like-in-2020-what-changed-and-what-you-can-do-today-with-node-js) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [Stop Using Node.js Like It’s 2020! - Alfonso Graziano](https://www.wearedevelopers.com/videos/1863-stop-using-node-js-like-it-s-2020-alfonso-graziano) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) ## Related Articles - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)