Elisity Deployment Engineer

Network Security – Elisity Deployment Engineer

Role Overview The Elisity Deployment Engineer is responsible for the end-to-end onboarding of Elisity's identity-based microsegmentation platform onto corporate network infrastructure. This role works closely with network, security, and IT operations teams to identify target switches, push validated configurations, confirm traffic visibility within the Elisity Cloud Controller (CCC), and support device grouping to enforce policy.

• Switch Identification & Scoping
• Inventory and evaluate corporate switches as candidates for Elisity deployment
• Coordinate with network teams to confirm switch compatibility (platform, OS version, port capacity)
• Document deployment scope, prioritization, and phasing plan

• Configuration & Change Management
• Author and submit change requests for enabling Elisity configurations on targeted switches (e.g., 802.1X, RADIUS, VXLAN/ZTNA-related settings)
• Follow change management processes to ensure peer review, approval, and scheduling of switch changes
• Execute approved changes during defined maintenance windows with rollback plans in place

• Traffic Validation
• Confirm that switches are successfully forwarding telemetry and traffic to the Elisity Cloud Controller (CCC)
• Troubleshoot connectivity issues between switches and the CCC, escalating to Elisity support when needed
• Validate endpoint visibility and identity resolution within the CCC post-deployment

• Device Grouping & Policy Support
• Assist security and operations teams in categorizing and grouping discovered devices within the Elisity platform
• Apply labels, tags, and group policies consistent with organizational segmentation standards
• Support the development and refinement of microsegmentation policies based on observed traffic patterns

• 3+ years of experience in network engineering or network security
• Hands-on experience with enterprise switching platforms (Cisco Catalyst, Nexus, or equivalent)
• Working knowledge of 802.1X, RADIUS/AAA, and network access control (NAC) concepts
• Familiarity with change management processes (ITIL or equivalent)
• Strong troubleshooting skills across Layer 2/3 environments

• Experience with Elisity or similar microsegmentation/NAC platforms (Cisco Client, Forescout, etc.)
• Understanding of Zero Trust Network Access (ZTNA) principles
• CCNP Security or equivalent certification
• Experience with network automation tools (Ansible, Python, or similar)