CISCO ISE SME
Location: Remote
Work Type: Remote
Remote Work: YES
Job Description
Gridiron IT is seeking a Cisco Identity Services Engine (ISE) Subject Matter Expert (SME) will serve as the principal systems and security engineer driving the implementation of the Comply-to-Connect (C2C) framework across Department of War (DoW) networks Operating within a Zero Trust Architecture (ZTA), the SME is responsible for configuring, optimizing, and maintaining Cisco ISE as the central Policy Decision Point (PDP)
to ensure no device connects to the warfighting network without complete posture assessment, cryptographic identity verification, and dynamic, least-privilege authorization
Responsibilities:
• Design and manage Cisco ISE profiling policies to discover, classify, and inventory all IT, OT, and IoT assets
• Engineer complex Posture Policies utilizing the Cisco Secure Client (formerly AnyConnect) ISE Posture Module to validate host firewalls, anti-virus, OS patch level, and local certificates.
• Configure and manage Agentless Posture and Temporal Agent workflows for non-traditional endpoints
• Author and maintain Policy Sets, Authorization Profiles, and Downloadable ACLs (dACLs) to strictly control device enclaves
• Build automated redirection and quarantine portals to guide users/endpoints through self-remediation (e.g., automated patching or agent installation)
• Deploy Cisco TrustSec (CTS) and define Security Group Tags (SGTs) for software-defined segmentations across routers, switches, and firewalls.
• Architect Cisco pxGrid (Platform Exchange Grid) integrations to share real-time endpoint context with SIEM (Splunk), vulnerability scanners (ACAS), firewalls, and configuration managers (MECM/SCCM)
• Manage ISE system health, replication across distributed deployments (PAN, MNT, and PSN nodes), and execute periodic patch/software updates
• Perform DISA Security Technical Implementation Guide (STIG) validations and remediation on all Cisco ISE nodes and Network Access Devices (NADs)
• Manage X.509 enterprise Public Key Infrastructure (PKI) certificates, including Certificate Authority (CA) mappings, CRLs, and OCSP validation for 802.1X EAP-TLS authentication
Technical Environment & Integrations
The ISE SME must possess deep operational experience integrating ISE with standard DoW infrastructure:
- Directory Services: Active Directory (AD) and LDAP
- DoW Base Security Suite: Host-Based Security System (HBSS) / Endpoint Security Solutions (ESS).
- Vulnerability Scanners: Assured Compliance Assessment Solution (ACAS/Tenable)
- Cisco Ecosystem: Catalyst Switch Platforms, Cisco DNA Center / SD-Access, and Firepower Threat Defense (FTD)
- Air-Gapped Licensing: Managing Cisco Smart Licensing using local On-Premises CSSM or Specific License Reservations (SLR) for disconnected military enclaves
Qualifications & Requirements
Required Experience & Education
- Education: Bachelor’s degree in a STEM field can be subsitituted for 5 years of experience, masters = 8 years
- Experience: Minimum of 15+ years in network engineering, with at least 4+ years dedicated strictly to architecting and maintaining Cisco ISE in a DoD/DoW or federal enterprise environment.
- Deep Protocol Knowledge: Mastery of EAP-TLS, PEAP, RADIUS, TACACS+, 802.1X, MAC Authentication Bypass (MAB), and SGTs
Required Certifications
- Cybersecurity Baseline: Must meet DoD 8140/8570 IAT Level II requirements (e.g., Security+ CE, CCNA Security, or CySA+). IAT Level III (e.g., CISSP, CASP+) is highly preferred
- Technical Certifications: CCNP Security (specifically showing concentration in Implementing and Configuring Cisco Identity Services Engine (SISE)) or CCIE Security
Security Clearance
Must possess an active Secret clearance
Clearance
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Secret Clearance
Compensation and Benefits
Salary Range: $70-105/hr (Compensation is determined by various factors, including but not limited to location, work experience, skills, education, certifications, seniority, and business needs. This range may be modified in the future.)
Benefits: Gridiron offers a comprehensive benefits package including medical, dental, vision insurance, HSA, FSA, 401(k), disability & ADD insurance, life and pet insurance to eligible employees. Full-time and part-time employees working at least 30 hours per week on a regular basis are eligible to participate in Gridiron’s benefits programs.
Gridiron IT Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status or disability status.
Gridiron IT is a Women Owned Small Business (WOSB) headquartered in the Washington, D.C. area that supports our clients' missions throughout the United States. Gridiron IT specializes in providing comprehensive IT services tailored to meet the needs of federal agencies. Our capabilities include IT Infrastructure & Cloud Services, Cyber Security, Software Integration & Development, Data Solution & AI, and Enterprise Applications. These capabilities are backed by Gridiron IT's experienced workforce and our commitment to ensuring we meet and exceed our clients' expectations.
