Senior Network Engineer, Network Access Security

What you'll do

• Design, deploy, and operate 802.1X and MAB authentication for global wired and wireless access.
• Build and tune Cisco ISE policy sets, including authentication rules, posture, profiling, and dynamic VLAN assignments.
• Troubleshoot complex access failures from the supplicant and switchport through RADIUS to the ISE policy decision.
• Manage the Cisco ISE platform lifecycle, including deployment, patching, and certificate management for the distributed estate.
• Operate Forescout for device discovery, classification, and policy enforcement to maintain an accurate network picture.
• Implement network segmentation using VLANs, ACLs, and group-based policies to support a Zero Trust roadmap.
• Manage RADIUS and TACACS+ for authentication and support the underlying Cisco access layer switching.
• Create and maintain technical documentation, runbooks, and standard configurations for the network access program.

What we're looking for

• Bachelor's Degree in a relevant field.
• Legal authorization to work in the US.
• Minimum of 8 years of related experience (preferred).
• Bachelor's degree in Computer Science, Engineering, Information Technology, or equivalent experience (preferred).
• Current or previously held Cisco networking certification, such as CCNP or CCNP Security (preferred).
• Extensive hands-on experience administering Forescout, including design, creation, and enforcement of network access policy (preferred).
• Deep expertise in 802.1X, MAB, RADIUS, and common EAP methods (preferred).
• Practical experience with Cisco Identity Services Engine (ISE) for device administration, deployment, and certificate lifecycle (preferred).