Description

You will own the design, architecture, and implementation of enterprise network security solutions, with a primary focus on Cisco ISE.

This role is on-site.

Responsibilities

• Deploy and administer Cisco ISE 2.x/3.x, managing authentication protocols (EAP-TLS, PEAP, MAB), authorization policies, and TrustSec/SGT.
• Align ISE policies with Zero Trust frameworks and regulatory compliance standards to ensure enterprise security posture.
• Ensure seamless interoperability with multi-vendor environments, including firewalls, switches, and wireless controllers.
• Integrate ISE with Active Directory/LDAP, SSO, and MDM platforms (Intune, Workspace ONE) for user and device management.
• Utilize monitoring and logging tools (Splunk, QRadar, ELK) for troubleshooting and security analytics.

Required Skills

• 5+ years of experience in network security and architecture.
• Deep expertise in Cisco ISE deployment, administration, and advanced troubleshooting.
• Strong knowledge of switching technologies: VLANs, Trunking, 802.1X, and Port Security.
• Proficiency with authentication protocols, RADIUS architecture, CoA, and dACLs.
• Experience with PKI, certificates, and SCEP processes.
• Ability to integrate with Active Directory, LDAP, and SSO systems.
• Hands-on experience with SIEM tools: Splunk, QRadar, and ELK.
• Familiarity with monitoring tools such as SolarWinds and DNA Center.

Preferred Skills

• Scripting skills in Python or Bash for automation.
• Experience with wireless controllers (WLC) and firewalls (Cisco ASA, FTD, Palo Alto).

Key Skills

Education

Bachelor's degree