Network Engineer

The Network Engineer will design, secure, and support the Cisco network. The best candidate will own network access control through Cisco Identity Services Engine (ISE). This is a fast-paced, on-site role. Core hours are weekdays, with some after-hours required. Occasional travel between Houston-area facilities is expected.

Duties:

• Administer and enhance Cisco ISE: 802.1X, MAB, posture, guest and BYOD access, device profiling, and TrustSec/SGT policy.

• Design, deploy, and troubleshoot Cisco switching, routing, and wireless networks.

• Monitor network health and performance; resolve incidents and outages quickly, with clear root-cause documentation.

• Manage change control, patching, firmware lifecycle, configuration backups, and network documentation.

• Work with security, infrastructure, and application teams on firewall rules, VPN, and access policy.

• Partner with vendors, carriers, and integrators on projects and escalations.

• Support network integration for new organizations, facilities, and acquisitions.

• Participate in an on-call rotation and provide on-site coverage.

• 5+ years of hands-on experience with Cisco ISE in production, including policy sets, authentication and authorization profiles, and certificate-based access.

• Strong working knowledge of 802.1X, RADIUS, VLANs, STP, OSPF/BGP, QoS, and wireless (WLC/AP) operations.

• Experience administering Cisco Catalyst and/or Nexus switching in an enterprise or venue environment.

• Solid troubleshooting skills using packet capture, logs, and monitoring tools.

• Clear written and verbal communication, with the ability to explain technical issues to non-technical staff.

• Network automation skills (Python, Ansible, or REST APIs).

• Experience integrating networks after an acquisition or merger.

Education / Certifications:

• Bachelor’s degree in IT or a related field, or equivalent experience.

• Must have Current Cisco CCNA certification.

Preferred Qualifications

• CCNP Enterprise or Cisco Certified Specialist in ISE.

• Experience with Cisco DNA Center / Catalyst Center, Meraki, or SD-Access.

• Familiarity with firewalls (Cisco Secure Firewall or equivalent), VPN, and Zero