Design, implement, and administer Cisco ISE solutions to enforce network access control across SEC-managed enterprise environments
Build and maintain ISE policy sets, authentication/authorization rules, and enforcement workflows for user and device onboarding
Plan and execute ISE platform upgrades, patching, and optimization activities to maintain performance, resiliency, and service continuity
Configure and manage AAA services using RADIUS and TACACS+ for secure access to network infrastructure and services
Integrate Cisco ISE with Microsoft Active Directory and Microsoft Entra ID (Azure AD)
Support implementation of SEC-directed control enforcement activities, including secure authentication methods and protection of data in transit
Troubleshoot complex authentication, authorization, and network access issues across Cisco switching, routing, and wireless infrastructure
Monitor ISE health, logs, and policy outcomes; proactively identify trends and implement corrective actions to reduce recurring incidents

USA Citizenship required
Clearance: Ability to obtain and maintain SEC Public Trust (or higher if required)
Education: Bachelors in a relevant field (e.g., Information Technology, Cybersecurity, Computer Science, Engineering)
5-7 years of experience in network engineering and/or security roles in enterprise environments
3+ years of hands-on experience implementing and managing Cisco ISE in production environments
Experience integrating identity and access controls with Microsoft Active Directory and Microsoft Entra (Azure AD)
Strong knowledge of network protocols, including AAA protocols such as RADIUS and TACACS+, and 802.1X/NAC controls
Wired and wireless network security best practices across Cisco network devices
Enterprise security frameworks and zero-trust access control principles
Incident analysis, root-cause troubleshooting, and operational documentation for SLA-driven support environments

Cisco ISE Engineer

Key skills