Sr. Network Engineer (Cisco ISE)

Responsibilities:

• Implement and integrate Network Access Control (NAC) / Cisco ISE with wired data, wireless infrastructure, and VPN as well as posturing and client provisioning
• Build and analyze ISE rules to comply with client network security policies
• Write/engineer ISE rules scripts with associated change documentation to meet project goals and deadlines
• Develop and manage API-based integrations with Cisco ISE, leveraging REST APIs for communication with other systems.
• Write code/scripts to automate network access control processes and security policies using APIs (Python, JavaScript, etc.).
• Create workflows and automate repetitive tasks like user onboarding, device management, and security policy updates
• Serve as a technical resource providing guidance and advice to associates on Network Access Control (NAC) / Cisco Identity Services Engine (ISE) for utilizing the full capability of technology in designing effective solutions
• Support in the authoring and maintenance of ISE related documentation, including that for standards, processes, network security, topology, and inventory, to ensure high quality service on an ongoing basis
• Implement any ISE changes during appropriate change windows (typically after hours)
• Participate in on-call support rotation for Network Access Control (NAC)/ISE, to maximize network availability (after hours)

Requirements:

• 3+ years of experience as a Cisco ISE Engineer creating design documentation, building ISE rules, implementing ISE solutions across a variety of environments, and be a subject matter expert on the ISE application
• Demonstrated experience providing ISE policy management and control platforms for wired, wireless, and VPN users
• Proficiency in developing API calls, scripting, and coding using Python, JavaScript, or similar languages
• Strong understanding of RESTful APIs and web services
• Knowledge of network security protocols (RADIUS, TACACS+, 802.1x)
• Ability to analyze complex problems associated with the ISE platform and implement solutions and/or workarounds to comply with network security policies
• Excellent communication, interpersonal, and problem-solving skills with a track record as a problem solver & an effective team player is essential
• Be the escalation point for resolution of Cisco ISE integration issues
• Any experience with Meraki wireless infrastructure including the associated cloud controllers, access points, and portal would be an advantage

Education:

• Bachelor's degree in Computer Science/Engineering or related field