Cisco Identity Services Engine Administrator

Cisco Identity Services Engine Administrator

Location:

Hartford, CT

Duration:
Contract

Skills Required:

• Design and architect scalable Cisco Client deployments, considering factors such as high availability, redundancy, and performance optimization
• Develop detailed network diagrams, including physical and logical topologies, for Cisco Client deployments Configure Cisco Client nodes, personas (Administration, Policy Service, and Monitoring), and services (Authentication, Authorization, and Accounting).
• Implement identity sources such as Active Directory, Lightweight Directory Access Protocol (LDAP), and external RADIUS servers for user authentication
• Create and customize authentication and authorization policies using Cisco Client Policy Sets, Policy Elements, and Policy Conditions
• Configure Cisco Client Profiler policies to classify and enforce access controls based on device types and attributes
• Integrate Cisco Client with Cisco switches (e.g., Catalyst, Nexus) using IEEE 802.1X, Cisco Trust Sec, and Cisco Any Connect for secure network access
• Implement Cisco Client pxGrid integration with third-party security products for real-time threat detection and response
• Troubleshooting skills on Cisco Client to resolve authentication and authorization issues
• Implement Cisco Client Posture Assessment policies to enforce endpoint security compliance with organizational policies and industry standards (e.g., HIPAA, PCI DSS).
• Should be able to configure Cisco Client Guest Services to provide secure guest access with self-registration, sponsor approval workflows, and captive portal authentication.
• Document Cisco Client deployment configurations, including network device profiles, identity stores, authentication and authorization policies, and posture assessment rules
• Perform Cisco Client software upgrades, patches, and hotfix installation per Cisco recommendations
• Collaborate with IT security teams to define and implement Cisco Client Threat-Centric NAC policies for dynamic threat containment and response
• Communicate effectively with stakeholders to gather requirements, assess risks, and provide recommendations for enhancing network security posture with Cisco Client
• Network devices configuration, administration and troubleshooting skills
• Deep understanding and troubleshooting skills of TCP/IP, Switching & Routing protocols, WLAN, Client platform
• Knowledge and experience in STP, VTP, HSRP, VLAN, QoS and other switching technologies
• Prepare/update HLD & LLD and technical project documentation or presentation
• Product knowledge:
  Cisco Identity Service Engine (Client) Cisco Router (ISR, ASR) Switches -- Nexus 9K/7K/2K, Cisco 6500/4500/3750/2960 Cisco Wireless

Good-To-Have:

• Cisco Client Profession/Expert level certification
• Cisco certifications such as CCNP Security or CCIE Security to demonstrate expertise in network access control and identity management with Cisco Client
• Cisco Identity Service Engine (Client)