Senior Network Engineer – ISE/NAC

Senior Network Engineer – ISE/NAC (Santa Clara, CA)
Location: Santa Clara, CA
Work Mode: 5 Days Onsite

Interview: Onsite Interview may be required
Job Summary:
We are looking for a Senior Network Engineer with strong expertise in Cisco ISE, Network Access Control (NAC), enterprise wireless networking, and Cisco routing/switching technologies. The candidate will be responsible for designing, implementing, securing, and supporting large-scale enterprise network infrastructures while driving network modernization and automation initiatives.
Key Requirements:

• 8+ years of enterprise network engineering experience.
• 5+ years of hands-on experience with Cisco ISE and NAC deployments.
• Strong expertise in Cisco Catalyst switching and routing platforms.
• Extensive experience with enterprise wireless networking and Cisco Wireless LAN Controllers.
• Deep knowledge of 802.1X, RADIUS, TACACS+, AAA, DHCP, DNS, and TCP/IP.
• Experience integrating Cisco ISE with Active Directory, PKI, MDM, SIEM, and certificate services.
• Strong troubleshooting, analytical, and communication skills.

Core Responsibilities:

• Design, deploy, and maintain Cisco ISE solutions for AAA services.
• Implement NAC policies using 802.1X, MAB, posture assessment, profiling, and guest access.
• Manage and secure enterprise wired and wireless network environments.
• Configure and troubleshoot Cisco Catalyst switches, routers, and wireless infrastructure.
• Support routing protocols including OSPF, BGP, EIGRP, HSRP/VRRP, VLANs, STP, EtherChannel, and Multicast.
• Perform network performance analysis, optimization, and capacity planning.
• Lead network infrastructure projects from design through deployment.
• Develop technical documentation, network diagrams, and operational procedures.
• Participate in incident response, outage troubleshooting, and root cause analysis.
• Collaborate with security, cloud, systems, and application teams.

Preferred Skills:

• Cisco certifications (CCNP Enterprise, CCNP Security, CCIE).
• Cisco DNA Center and Software-Defined Access (SDA) experience.
• Network automation using Python, Ansible, REST APIs, or Terraform.
• Cloud networking experience in AWS, Azure, or Google Cloud.
• Knowledge of Zero Trust and modern network security architectures.

Key Technologies:
Cisco ISE, NAC, Cisco Wireless, Catalyst 9K, Cisco DNA Center, SDA Fabric, 802.1X, OSPF, BGP, EIGRP, Enterprise LAN/WAN, Network Security, Python Automation.