> Markdown version of [/jobs/ext/4672403-sr-cisco-ise-engineer](https://www.wearedevelopers.com/jobs/ext/4672403-sr-cisco-ise-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Cisco ISE Engineer

- **Company:** Job Cloud Inc.
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Contract
- **Skills:** Microsoft Access, IEEE 802.1X, Wireless LAN, Active Directory, Application Programming Interfaces (APIs), User Authentication, Automation of Tests, Profiling, Monitoring of Systems, Internetworking, Python (Programming Language), Network Security, Lightweight Directory Access Protocols (LDAP), Network Architecture, Network Segmentation, Public Key Infrastructure, Ansible, Zero Trust Network Access, Roaming, SAP Sales and Distribution, Systems Integration, Wireless Access Point, Wireless Networks, Wi-Fi Technology, Identity Services Engine, Network Access Control, System Availability, TACACS+ Protocol, Restful APIs, Cisco Switches, Cisco
- **Published:** November 11, 2026
- **Apply:** https://www.dice.com/job-detail/f336bc6f-f1d4-408f-9efa-b20b8453d668

## About the Role

* 10+ years of enterprise network engineering or architecture experience, including substantial experience with network access control and wireless networking.
 * Expert-level production design and administration experience with Cisco ISE, including distributed deployments, policy services, profiling, certificates and integrations with AD/LDAP and MDM platforms.
 * Deep knowledge of enterprise WLAN design, including Cisco wireless platforms, Wi-Fi standards, radio frequency fundamentals, roaming, authentication, guest access, segmentation, quality of service and high availability.
 * Strong understanding of zero-trust access, identity-based policy, endpoint onboarding and network segmentation concepts.
 * Experience designing or supporting CDI solutions and integrating connected endpoints with secure network access services.
 * Proven ability to lead complex technical designs, migrations, troubleshooting and stakeholder reviews.
 * Ability to collaborate openly with architects, engineers, project managers and customer stakeholders and communicate technical information clearly.

Preferred: Experience with Cisco Catalyst Center, Cisco Wireless LAN Controllers, Cisco Catalyst 9800, Cisco Meraki, Cisco TrustSec and Software-Defined Access (SD-Access). Scripting and automation experience using Python, Ansible and REST APIs. Experience in a regulated enterprise environment.

 * Preferred certifications: Cisco Certified Network Professional (CCNP) or Cisco Certified Internetwork Expert (CCIE) in Enterprise Wireless or Security; Cisco ISE certification; or an equivalent wireless certification.

Tools and Technologies:

 * Cisco Identity Services Engine (ISE)
 * Cisco Catalyst 9800 Wireless Controllers and Cisco wireless access points
 * Cisco Catalyst Center and Software-Defined Access (SD-Access)
 * Cisco Meraki wireless platforms
 * Cisco TrustSec and Security Group Tags (SGTs)
 * IEEE 802.1X, MAB, RADIUS and TACACS+
 * Active Directory, LDAP, PKI and MDM integrations
 * Wireless survey, spectrum analysis and monitoring tools
 * Python, Ansible and REST APIs

## Description

Sr. Cisco ISE Engineer responsible for secure enterprise wireless access, network access control and CDI architecture. This role owns architecture standards, leads complex design and migration initiatives, and serves as the technical authority for Cisco Identity Services Engine (ISE), wireless local area networks (WLAN), IEEE 802.1X policy and CDI solutions. The architect will translate business and security requirements into scalable, resilient designs and provide technical leadership through implementation and operational transition. One position is available., * Design, document and govern enterprise Cisco ISE, WLAN and CDI architectures, standards and reference designs.

 * Architect and refine Cisco ISE deployments, including distributed nodes, policy sets, IEEE 802.1X, MAC Authentication Bypass (MAB), profiling, posture, certificates, guest access, bring your own device (BYOD), Cisco TrustSec and Security Group Tags (SGTs).
 * Lead wireless architecture and design across controllers, access points, radio frequency planning, authentication, roaming, high availability, segmentation and quality of service.
 * Define integration patterns for Active Directory (AD), Lightweight Directory Access Protocol (LDAP), public key infrastructure (PKI), mobile device management (MDM), security platforms and network infrastructure.
 * Lead design reviews, technology refreshes, migrations, cutovers and lifecycle upgrades with validation and rollback plans.
 * Drive complex troubleshooting and root-cause analysis for authentication, authorization, endpoint onboarding, wireless performance and connectivity issues.
 * Partner with security, LAN, WAN, cloud, endpoint and tooling teams to align access policies, segmentation, visibility and automation goals.
 * Create high-quality architecture documents, diagrams, implementation guidance, operational runbooks and knowledge-transfer materials.
 * Contribute to configuration, compliance and testing automation using Python, Ansible and REST application programming interfaces (APIs).