CISCO ISE LEAD Network Access Control

Mode of Interview-Onsite Interview Mandatory

We are seeking an experienced Senior Network Engineer to join our Infrastructure and Network Operations team in Santa Clara, California. The ideal candidate will possess deep expertise in Cisco Identity Services Engine (ISE), Network Access Control (NAC), enterprise wireless networking, and advanced routing and switching technologies. This role will be responsible for designing, implementing, securing, and supporting large-scale enterprise network environments while driving network modernization and automation initiatives.

• Design, deploy, and maintain Cisco ISE solutions for authentication, authorization, and accounting (AAA).
• Implement and support NAC policies utilizing 802.1X, MAB, posture assessment, profiling, and guest access services.
• Integrate Cisco ISE with Active Directory, PKI, MDM, SIEM, and other security platforms.
• Troubleshoot complex authentication and authorization issues across wired and wireless networks.
• Develop security policies and access controls to ensure compliance with organizational standards.

• Design, implement, and optimize enterprise wireless networks using Cisco Catalyst and Cisco Wireless LAN Controllers.
• Configure and troubleshoot wireless technologies including WPA2/WPA3, RF optimization, roaming, QoS, and high-density deployments.
• Conduct wireless surveys, capacity planning, and performance tuning.
• Support secure wireless onboarding and policy enforcement through Cisco ISE.

• Design, implement, and support enterprise LAN/WAN infrastructure.
• Configure and troubleshoot Cisco Catalyst switches and routing platforms.
• Manage Layer 2 and Layer 3 technologies including:
  • VLANs
  • STP/RSTP/MST
  • Ether Channel
  • HSRP/VRRP
  • OSPF
  • BGP
  • EIGRP
• Perform network performance analysis, capacity planning, and optimization.

• Lead network infrastructure projects from design through deployment.
• Create and maintain network architecture diagrams, operational procedures, and technical documentation.
• Participate in incident response and root cause analysis for critical network outages.
• Collaborate with security, systems, cloud, and application teams to support business initiatives.
• Evaluate emerging networking and security technologies and recommend improvements.

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent experience.
• 8+ years of enterprise network engineering experience.
• 5+ years of hands-on experience with Cisco ISE and NAC deployments.
• Strong expertise in Cisco Catalyst switching and routing platforms.
• Extensive experience with enterprise wireless technologies.
• Deep understanding of:
  • 802.1X
  • TACACS+
  • AAA services
  • DHCP
  • DNS
  • TCP/IP
• Experience integrating ISE with Active Directory and certificate services.
• Strong troubleshooting and analytical skills.
• Excellent verbal and written communication skills.