Network Security Engineer
Core
Senior Network Security Engineer responsible for replacing legacy NAC systems with Cisco ISE to enforce Zero Trust identity-based access in a government environment.
Role type
Senior hands-on IC Network Security Engineer
Builds
Secure wired and wireless network access infrastructure using Cisco ISE
Domain
Government / Network Security / Zero Trust
Required skills
Cisco ISE, RADIUS, TACACS+, 802.1X/EAP, PKI, Active Directory, LDAP, Wireless LAN Controllers, device profiling, Zero Trust architecture, policy migration, root-cause analysis
Preferred skills
Cisco CCNP Security, Cisco ISE Specialist, Public Trust clearance
Technologies
Cisco ISE, Cisco SNS 3715, Cisco 9800, ForeScout CounterACT, Active Directory, LDAP, NodeJS
Responsibilities
Configure and operate Cisco ISE for NAC/NAM including RADIUS and TACACS+ services; Deploy and maintain high-availability Cisco ISE clusters; Migrate legacy ForeScout CounterACT policies to Cisco ISE; Provide wireless support and integrate ISE with wireless controllers; Integrate ISE with Active Directory and LDAP for identity management; Monitor security events and conduct root-cause analysis; Mentor junior staff and document engineering designs.
Seniority
Senior, hands-on IC