Location: Richardson, TX 75082
Contract Duration: 12 Months
Experience Required: 8–10 Years
Job Description
We are seeking an experienced Cisco Identity Services Engine (ISE) with strong network security engineering expertise and hands-on experience administering and troubleshooting Cisco ISE 3.x.
The ideal candidate will have extensive knowledge of Network Access Control (NAC), 802.1X authentication, RADIUS, EAP, certificate-based authentication, Active Directory integration, and Cisco Catalyst and wireless infrastructure. The role involves managing distributed ISE deployments, maintaining authentication and authorization policies, supporting certificate lifecycle management, and ensuring secure and reliable network access.
Key Responsibilities
-
Administer, configure, and troubleshoot Cisco ISE 3.x environments.
-
Manage ISE upgrades, patches, configuration changes, node maintenance, and platform health.
-
Support distributed, multinode ISE deployments across production and non-production environments.
-
Configure and troubleshoot 802.1X, RADIUS, EAP, EAP-TLS, and certificate-based authentication.
-
Manage Network Access Control (NAC), AAA, authentication policies, authorization policies, and policy sets.
-
Integrate Cisco ISE with Active Directory and manage identity sources and security group mappings.
-
Create, modify, validate, and troubleshoot ISE authorization policies.
-
Support Cisco Catalyst switching and wireless infrastructure integration.
-
Manage PKI and certificate lifecycle activities, including certificate renewal and replacement.
-
Troubleshoot certificate chains, trust relationships, certificate thumbprints, and endpoint authentication issues.
-
Coordinate ServiceNow change management activities.
-
Engage with Cisco TAC for technical troubleshooting and issue resolution.
Required Qualifications
-
8–10 years of experience in network security engineering or related infrastructure roles.
-
Strong recent hands-on experience with Cisco ISE 3.x administration and troubleshooting.
-
Experience supporting distributed, multinode Cisco ISE deployments.
-
Strong understanding of 802.1X, RADIUS, EAP/EAP-TLS, NAC, and AAA concepts.
-
Experience with Cisco ISE authentication and authorization policies, policy sets, identity sources, and endpoint access controls.
-
Hands-on experience integrating Cisco ISE with Active Directory.
-
Experience with Cisco Catalyst and wireless infrastructure integration.
-
Strong knowledge of PKI and certificate lifecycle management.
-
Experience troubleshooting certificate-based endpoint authentication.
-
Cisco certification required.
Primary Skills
-
Cisco Identity Services Engine
-
Network Security Engineering
-
Cisco Catalyst
-
Wireless Integration
-
Active Directory Integration
-
Network Access Control (NAC)
-
802.1X, RADIUS, and EAP-TLS
-
PKI and Certificate Management
Secondary Skills
-
Splunk
-
ServiceNow Change Management
-
Python
-
Cisco TAC Support
-
Multinode ISE Deployments
-
Authentication and Authorization Policies
-
Certificate Lifecycle Management
-
AAA and Endpoint Access Controls
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.
We are committed to providing reasonable accommodations to qualified applicants with disabilities and for sincerely held religious beliefs, as required by applicable law. Applicants who require a reasonable accommodation during the hiring process may request assistance.
Employment may be contingent upon the successful completion of job-related pre-employment screening, which may include background and reference checks and, where permitted by applicable law and applicable to the position, drug testing. All such screening will be conducted in accordance with applicable federal, state, and local laws.
