Network Access Control Engineer

OneAPPS Consulting () is a Technology consulting firm based out of London and offices across Europe. We are working on various projects involving diverse, multicultural teams with clients across the Europe. We are an invaluable partner and our teams have collaborated to support the growth of our clients. With more than 7 locations worldwide we help our clients to deliver their projects smoothly.

We look forward to getting to know you and working with you.

Role:
Network Access Control Engineer

Location:

London - Canary Wharf

Work Model:
Hybrid - 3 Days/Week from Office

Scope of Work

• Seeking an experienced NAC engineer to lead the deployment, and management of NAC solutions with a focus on Forescout and Eye Segment platforms.
• Implement and maintain 802.1x authentication across wired and wireless networks.
• Develop and maintain automation scripts and playbooks using Ansible to streamline NAC operations and network device configurations.
• Collaborate with network, security, and operations teams to integrate NAC with broader security and infrastructure initiatives.
• Monitor, troubleshoot, and optimize NAC systems to ensure high availability, performance, and compliance.
• Conduct regular security assessments and audits of network access controls and recommend improvements.
• Document architecture, processes, and procedures for NAC deployments and operations.
• Mentor and guide junior engineers in NAC best practices and technologies.
• Stay current with industry trends and emerging technologies in NAC, network security and automation.
• Daily operational support
• Implementation support activities

Skills & experience:

• Experience in deployment and management of NAC solutions with a focus on Forescout and Eye Segment platforms. Some design experience would be a plus.
• Formal training or certification in infrastructure disciplines/concepts, with 5+ years of applied experience
• Network infrastructure engineering experience, with a focus on Network Access Control (NAC)
• Expertise with Forescout and Eye Segment platforms (deployment, configuration, and management); experience with other NAC solutions (e.g., Cisco ISE, Aruba Clear Pass) is a plus
• Risk/controls exposure and tooling familiarity (e.g., Archer or similar GRC platforms).
• Proficiency with automation tools - especially Ansible (developing playbooks and automating network/security tasks) - and experience working with XML, JSON, and REST APIs
• Familiarity with network security best practices and compliance requirements
• Excellent problem-solving, communication, and documentation skills; ability to work independently and lead cross-functional teams; experience with VMware ESXi infrastructure and Splunk Query Language (SPL)
• Demonstrated experience using enterprise-authorized AI capabilities to support infrastructure engineering workflows, with strong validation habits and awareness of data sensitivity
• Ability to review and validate AI-assisted recommendations before implementation; escape when uncertain; and ensure outcomes align with resiliency, security, and auditability expectations

Knowledge:

• Strong knowledge of 802.1X authentication protocols and enterprise implementation
• Solid understanding of network infrastructure fundamentals (switching, routing, VLANs, firewalls, wireless, etc.)

Qualifications:

• Bachelors in computer engineering/CS or industry equivalent experience
• Relevant certifications (network/security or risk fundamentals) and continuous learning in risk and resilience.