Cisco ISE Network Security Engineer

The ideal candidate will have extensive knowledge of Network Access Control (NAC), 802.1X authentication, RADIUS, EAP, certificate-based authentication, Active Directory integration, and Cisco Catalyst and wireless infrastructure. The role involves managing distributed ISE deployments, maintaining authentication and authorization policies, supporting certificate lifecycle management, and ensuring secure and reliable network access., * Administer, configure, and troubleshoot Cisco ISE 3.x environments.

• Manage ISE upgrades, patches, configuration changes, node maintenance, and platform health.
• Support distributed, multinode ISE deployments across production and non-production environments.
• Configure and troubleshoot 802.1X, RADIUS, EAP, EAP-TLS, and certificate-based authentication.
• Manage Network Access Control (NAC), AAA, authentication policies, authorization policies, and policy sets.
• Integrate Cisco ISE with Active Directory and manage identity sources and security group mappings.
• Create, modify, validate, and troubleshoot ISE authorization policies.
• Support Cisco Catalyst switching and wireless infrastructure integration.
• Manage PKI and certificate lifecycle activities, including certificate renewal and replacement.
• Troubleshoot certificate chains, trust relationships, certificate thumbprints, and endpoint authentication issues.
• Coordinate ServiceNow change management activities.
• Engage with Cisco TAC for technical troubleshooting and issue resolution.

We are seeking an experienced Cisco Identity Services Engine (ISE) with strong network security engineering expertise and hands-on experience administering and troubleshooting Cisco ISE 3.x., * 8-10 years of experience in network security engineering or related infrastructure roles.

• Strong recent hands-on experience with Cisco ISE 3.x administration and troubleshooting.
• Experience supporting distributed, multinode Cisco ISE deployments.
• Strong understanding of 802.1X, RADIUS, EAP/EAP-TLS, NAC, and AAA concepts.
• Experience with Cisco ISE authentication and authorization policies, policy sets, identity sources, and endpoint access controls.
• Hands-on experience integrating Cisco ISE with Active Directory.
• Experience with Cisco Catalyst and wireless infrastructure integration.
• Strong knowledge of PKI and certificate lifecycle management.
• Experience troubleshooting certificate-based endpoint authentication.
• Cisco certification required.

Primary Skills

• Cisco Identity Services Engine
• Network Security Engineering
• Cisco Catalyst
• Wireless Integration
• Active Directory Integration
• Network Access Control (NAC)
• 802.1X, RADIUS, and EAP-TLS
• PKI and Certificate Management

Secondary Skills

• Splunk
• ServiceNow Change Management
• Python
• Cisco TAC Support
• Multinode ISE Deployments
• Authentication and Authorization Policies
• Certificate Lifecycle Management
• AAA and Endpoint Access Controls