> Markdown version of [/jobs/ext/4622097-senior-network-engineer-nac-focused-clearpass-implementation](https://www.wearedevelopers.com/jobs/ext/4622097-senior-network-engineer-nac-focused-clearpass-implementation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Network Engineer- NAC Focused (ClearPass Implementation)

- **Company:** Traversa Solutions, Inc.
- **Location:** Richardson, TX, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** IEEE 802.1X, Wireless LAN, Active Directory, Amazon Web Services, Microsoft Azure, Hyper-V, Network Security, Lightweight Directory Access Protocols (LDAP), Routing, Packet Analyzer, Public Key Infrastructure, Azure Active Directory, Microsoft SharePoint, Security Information and Event Management, Virtual Local Area Networks, Identity Services Engine, System Availability, Firewalls (Computer Science), Juniper, Microsoft InTune, Odoo, Palo Alto Networks, Casper Suite, Fortinet, TACACS+ Protocol, Cisco, Vmware
- **Published:** November 7, 2026
- **Apply:** https://www.thejobnetwork.com/job/25247753-62f8-4fab-be28-3690c023a5ba/senior-network-engineer-nac-focused-clearpass-implementation

## About the Role

* 7 or more years of enterprise networking experience
 * 3 or more years of hands-on ClearPass design and implementation for external customers
 * Led at least three production ClearPass deployments through to 802.1X enforcement
 * 5 or more years with a value-added reseller, systems integrator, managed services provider or professional services firm, consulting directly with customers: requirements gathering, design and implementation
 * Active HPE Aruba Networking Certified Professional, Network Security (ACP-NS) certification.
 * Strong LAN and WLAN skills: VLANs, routing, switching, RADIUS, enterprise wireless design and deployment
 * Working knowledge of PKI and certificate lifecycle for device authentication
 * Ability to explain design decisions to both technical and non-technical stakeholders
 * Able to travel 20 to 30 percent, including overnight travel, and to support after-hours cutovers
 * Authorized to work in the United States. Visa sponsorship is not available for this role, * Experience with HPE Aruba Networking Central NAC, Juniper Mist Access Assurance, Cisco ISE or FortiNAC
 * ClearPass deployments in VMware, Hyper-V, AWS or Azure
 * Experience with ClearPass in higher education, K-12 or industrial/OT environments
 * CCNP Enterprise, CWNA or another professional-level networking certification
 * Firewall experience (Fortinet, Palo Alto Networks, Cisco or Check Point)
 * Bachelor's degree in a technical discipline, or equivalent experience

## Description

The Senior Network Engineer, NAC, leads HPE Aruba ClearPass implementations from discovery through enforcement and handoff, and carries the LAN and WLAN work that goes with them. You will design the policy model with the customer, build it, move it from monitor mode to enforcement without taking users offline, and lead other engineers on the project.

This is not a role for learning ClearPass on the job. We need an engineer who has already designed and deployed ClearPass in production for customers, and who can take the technical lead on a project from the first week., * Lead discovery and design workshops, and produce the NAC policy design: identity sources, roles, enforcement profiles and phased rollout plan

 * Design and deploy ClearPass clusters: publisher and subscriber placement, virtual appliance sizing, high availability and licensing
 * Build 802.1X authentication for wired and wireless (EAP-TLS, PEAP-MSCHAPv2), MAC authentication, guest and captive portal, and device onboarding
 * Integrate certificate-based authentication with the customer's PKI, including SCEP and MDM platforms such as Microsoft Intune and Jamf
 * Integrate ClearPass with Active Directory, LDAP and Microsoft Entra ID, and with firewalls and SIEM platforms for identity and context sharing
 * Configure device profiling and onboarding for IoT and OT devices
 * Configure TACACS+ device administration
 * Configure HPE Aruba Networking AOS-CX switching and wireless (AOS 8, AOS 10 and Aruba Central), and third-party switches, as RADIUS clients; implement user-based segmentation where in scope
 * Move deployments from monitor mode to enforcement in planned phases, with rollback at each stage
 * Troubleshoot authentication failures using Access Tracker, endpoint logs and packet captures
 * Plan and execute ClearPass upgrades and platform migrations
 * Act as technical lead on assigned projects: manage technical risk, review configurations and mentor other engineers
 * Support pre-sales with scoping, level-of-effort input and design review
 * Deliver knowledge transfer sessions and as-built documentation
 * Maintain customer documentation in SharePoint and record time and project notes in Odoo daily