> Markdown version of [/jobs/ext/3964409-cisco-ise-sme](https://www.wearedevelopers.com/jobs/ext/3964409-cisco-ise-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cisco ISE SME

- **Company:** Gridiron IT Solutions LLC
- **Location:** Washington, DC, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $145,600.0 - $218,400.0
- **Contract:** Contract
- **Skills:** Microsoft Access, IEEE 802.1X, Access Network, Active Directory, Antivirus Softwares, Macintosh Computers, User Authentication, Catalyst (Software), Cyber Security, System Configuration, Lightweight Directory Access Protocols (LDAP), System Center Configuration Manager, Public Key Infrastructure, X.509, Zero Trust Network Access, SAP Sales and Distribution, Security Information and Event Management, Systems Integration, Identity Services Engine, SC Clearance, Firepower, TACACS+ Protocol, Cts+, PSN, Splunk, Cisco, Vulnerability Analysis
- **Published:** October 27, 2026
- **Apply:** https://www.dice.com/job-detail/035a0db0-4903-4fde-87fb-c99235f1a793

## About the Role

The ISE SME must possess deep operational experience integrating ISE with standard DoW infrastructure:

 * Directory Services: Active Directory (AD) and LDAP

 * DoW Base Security Suite: Host-Based Security System (HBSS) / Endpoint Security Solutions (ESS).

 * Vulnerability Scanners: Assured Compliance Assessment Solution (ACAS/Tenable)

 * Cisco Ecosystem: Catalyst Switch Platforms, Cisco DNA Center / SD-Access, and Firepower Threat Defense (FTD)

 * Air-Gapped Licensing: Managing Cisco Smart Licensing using local On-Premises CSSM or Specific License Reservations (SLR) for disconnected military enclaves, * Education: Bachelor's degree in a STEM field can be subsitituted for 5 years of experience, masters = 8 years

 * Experience: Minimum of 15+ years in network engineering, with at least 4+ years dedicated strictly to architecting and maintaining Cisco ISE in a DoD/DoW or federal enterprise environment.

 * Deep Protocol Knowledge: Mastery of EAP-TLS, PEAP, RADIUS, TACACS+, 802.1X, MAC Authentication Bypass (MAB), and SGTs

Required Certifications

 * Cybersecurity Baseline: Must meet DoD 8140/8570 IAT Level II requirements (e.g., Security+ CE, CCNA Security, or CySA+). IAT Level III (e.g., CISSP, CASP+) is highly preferred

 * Technical Certifications: CCNP Security (specifically showing concentration in Implementing and Configuring Cisco Identity Services Engine (SISE)) or CCIE Security

Security Clearance
Must possess an active Secret clearance

## Description

Gridiron IT is seeking a Cisco Identity Services Engine (ISE) Subject Matter Expert (SME) will serve as the principal systems and security engineer driving the implementation of the Comply-to-Connect (C2C) framework across Department of War (DoW) networks Operating within a Zero Trust Architecture (ZTA), the SME is responsible for configuring, optimizing, and maintaining Cisco ISE as the central Policy Decision Point (PDP)
to ensure no device connects to the warfighting network without complete posture assessment, cryptographic identity verification, and dynamic, least-privilege authorization, * Design and manage Cisco ISE profiling policies to discover, classify, and inventory all IT, OT, and IoT assets

 * Engineer complex Posture Policies utilizing the Cisco Secure Client (formerly AnyConnect) ISE Posture Module to validate host firewalls, anti-virus, OS patch level, and local certificates.
 * Configure and manage Agentless Posture and Temporal Agent workflows for non-traditional endpoints

 * Author and maintain Policy Sets, Authorization Profiles, and Downloadable ACLs (dACLs) to strictly control device enclaves
 * Build automated redirection and quarantine portals to guide users/endpoints through self-remediation (e.g., automated patching or agent installation)
 * Deploy Cisco TrustSec (CTS) and define Security Group Tags (SGTs) for software-defined segmentations across routers, switches, and firewalls.

 * Architect Cisco pxGrid (Platform Exchange Grid) integrations to share real-time endpoint context with SIEM (Splunk), vulnerability scanners (ACAS), firewalls, and configuration managers (MECM/SCCM)
 * Manage ISE system health, replication across distributed deployments (PAN, MNT, and PSN nodes), and execute periodic patch/software updates

 * Perform DISA Security Technical Implementation Guide (STIG) validations and remediation on all Cisco ISE nodes and Network Access Devices (NADs)
 * Manage X.509 enterprise Public Key Infrastructure (PKI) certificates, including Certificate Authority (CA) mappings, CRLs, and OCSP validation for 802.1X EAP-TLS authentication