NAC Engineer III (Remote)

Overview

This is a remote role that may be hired in several markets across the United States.

We are seeking a NAC -Network Engineer III to lead the implementation, management, and enhancement of our enterprise Network Access Control systems. In this role, you will help ensure secure access to the network across all banking branches, corporate offices, and data centers. Your expertise will contribute directly to the institution's cybersecurity defenses and regulatory compliance posture (e.g., FFIEC, GLBA, PCI-DSS).

Responsibilities

• Architect and maintain scalable NAC solutions across the bank's network infrastructure (HQ, Branches, Campus).
• Develop and enforce granular access control policies based on device posture, user role, and risk profile.
• Implement and optimize 802.1X authentication, endpoint profiling, dynamic VLANs, and remediation workflows.
• Work with compliance and audit teams to ensure NAC systems meet FFIEC, GLBA, and PCI-DSS requirements.
• Integrate NAC with identity systems (Active Directory, LDAP), SIEM (e.g., Splunk), and EDR tools.
• Lead incident response related to unauthorized access attempts or rogue devices.
• Generate reports and provide insights into network security posture.
• Conduct internal audits and assist in risk assessments related to device access and visibility.
• Provide subject matter expertise in NAC strategy for new initiatives, mergers/acquisitions, and vendor risk evaluations.
• Mentor junior engineers and establish NAC operational runbooks and best practices.
• Support patching, upgrades, and platform migrations with minimal impact to banking operations.

Qualifications

Bachelor's Degree and 4 years of experience in Data, voice or converged networking OR High School Diploma or GED and 8 years of experience in Data, voice or converged networking

Preferred Qualifications:

• 7+ years of progressive experience in network/security engineering, including 3+ years in a NAC-focused role.
• Hands-on experience with Cisco ISE, Forescout CounterACT, in a financial or multi data center environment.
• In-depth knowledge of 802.1X, RADIUS, EAP, DHCP, SNMP, and endpoint posture assessments.
• Strong understanding of banking compliance frameworks: FFIEC, GLBA, PCI-DSS.
• Experience with network segmentation and zero trust network access (ZTNA) principles.
• Familiarity with core banking systems, remote site connectivity, and mobile/ endpoint management.

Preferred Certifications:

• Cisco ISE Specialist or CCNP Security
• Forescout Certified Administrator

Key Competencies:

• Strong analytical and decision-making skills in high-stakes banking or muti data center environments
• Effective communication with both technical and non-technical stakeholders
• Attention to detail with a strong focus on auditability and documentation
• Ability to lead projects independently and collaboratively

The base pay for this position is generally between $98,000 and $140,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.

This job posting is expected to remain active for 45 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at

$descr2

$descr3