Cisco ISE Engineer

Employment type Contract

Job Title Cisco ISE Engineer

Job Location Atlanta, GA

Duration 6+

Experience level 10+

Mandatory Skills Cisco ISE Engineer

Job Description

Design and Implementation: Collaborate with infra and security teams to design, implement and customize Cisco ISE solutions, integrate third party solutions to bolster the security posture of the organization and to meet, security business and regulatory requirements.

AAA Configuration: Review and configure AAA (Authentication, Authorization, and Accounting) protocols such as RADIUS and TACACS+ on Cisco ISE for secure network access. Ensure to leverage industry best practices to reduce the attack surface areas.

Endpoint Profiling: Understand, develop, and maintain endpoint profiling policies to classify and manage devices accessing the network based on their characteristics.

Network Access Control (NAC): Deploy and manage NAC solutions using Cisco ISE to enforce security policies, monitor network access, and ensure compliance.

Policy Management: Define and manage access control policies, posture assessments, and identity-based access controls within Cisco ISE.

Integration and Collaboration: Collaborate with network, security, and IT teams to integrate Cisco ISE with other security solutions (SIEM and log management), identity providers, and network infrastructure components.

Troubleshooting and Support: Diagnose and resolve complex issues related to Cisco ISE configurations, authentication failures, load balancer, licensing, and network access problems.

Documentation and Training: Maintain comprehensive documentation of Cisco ISE configurations, policies, and procedures. Develop method and procedures in alignment with Change management best practices and provide training and knowledge transfer to varied teams.

Upgrade and Patch Management: Plan and execute upgrades, patches, and maintenance activities for Cisco ISE deployments to ensure system stability and security. Escalate and troubleshoot along with Cisco TAC for identified bugs and potential work arounds.

Automation: Brainstorm and identify levers for automating mundane operational tasks and provide insights on how to better leverage new product features to improve security and adoption of the platform.

Qualifications we seek in you!

Minimum Qualifications / Skills

Bachelor's degree in IS, Computer Science, MIS Management, or related field, or equivalent combination of education and experience required

4+ years of experience in Network Security required.

4+ years of experience maintaining networks using multiple technologies such as firewall technologies, wireless technologies, vpn, content filtering, web application firewalls, network routers and switches is required.

3+ years Networking Administration experience required.

Strong knowledge of AAA protocols (RADUS, TACACS+), endpoint profiling, and NAC concepts.

Experience with scripting languages (Python, PowerShell) for automation and customization of Cisco ISE is a plus.

Preferred Qualifications/ Skills

Strong knowledge of TCP/IP

Hands on experience with packet level analysis and effective troubleshooting skills.

Familiar with Windows, UNIX, LINUX and IOS operating systems

Good ITIL knowledge

Flexible to work for 24x7 process.

Excellent Communication and interpersonal Skills

Ability to prepare Dashboards and Reports

Experience of working independently & as a team player

Should have a proactive work approach.

Tekshapers is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.