Network Architect

Job Tittle : Network Architect – Cisco ISE, Wireless & CDI

Location : Hybrid Indianapolis, IN

Duration : Long Term

Position Overview

· The Network Architect is a senior subject matter expert responsible for enterprise wireless access, Network Access Control (NAC), and CDI architecture.

· This role will own architecture standards, lead complex design and migration initiatives, and serve as the technical authority for Cisco Identity Services Engine (ISE), Wireless LAN (WLAN), IEEE 802.1X policies, and CDI solutions.

· The architect will translate business and security requirements into scalable, secure, and resilient network designs while providing technical leadership throughout implementation and operational transition.

Key Responsibilities

· Design, document, and govern enterprise Cisco ISE, WLAN, and CDI architectures, standards, and reference designs.

· Architect and optimize Cisco ISE deployments, including distributed nodes, policy sets, IEEE 802.1X, MAC Authentication Bypass (MAB), profiling, posture assessment, certificates, guest access, BYOD, Cisco TrustSec, and Security Group Tags (SGTs).

· Lead wireless architecture and design across controllers, access points, RF planning, authentication, roaming, high availability, network segmentation, and Quality of Service (QoS).

· Define integration strategies for Active Directory (AD), LDAP, PKI, MDM, security platforms, and network infrastructure.

· Lead architecture reviews, technology refreshes, migrations, cutovers, and lifecycle upgrades, including validation and rollback planning.

· Drive complex troubleshooting and root-cause analysis involving authentication, authorization, endpoint onboarding, wireless performance, and connectivity issues.

· Collaborate with security, LAN, WAN, cloud, endpoint, and tooling teams to align access policies, network segmentation, visibility, and automation objectives.

· Develop architecture documents, network diagrams, implementation guidelines, operational runbooks, and knowledge-transfer materials.

· Support configuration, compliance, and testing automation using Python, Ansible, and REST APIs.

Required Qualifications

· 10+ years of experience in enterprise network engineering or architecture, with strong expertise in Network Access Control (NAC) and wireless networking.

· Expert-level hands-on experience designing, deploying, and administering Cisco ISE in production environments.

· Strong knowledge of Cisco ISE distributed deployments, Policy Services, profiling, certificates, and integrations with AD/LDAP and MDM platforms.

· Deep understanding of enterprise WLAN architecture, including Cisco wireless platforms, Wi-Fi standards, RF fundamentals, roaming, authentication, guest access, segmentation, QoS, and high availability.

· Strong understanding of Zero Trust architecture, identity-based access policies, endpoint onboarding, and network segmentation.

· Experience designing or supporting CDI solutions and integrating connected endpoints with secure network access services.

· Proven ability to lead complex technical designs, network migrations, troubleshooting, and stakeholder reviews.

· Strong communication and collaboration skills, with the ability to work effectively with architects, engineers, project managers, and customer stakeholders.

Preferred Qualifications

· Experience with Cisco Catalyst Center, Cisco Wireless LAN Controllers, Cisco Catalyst 9800, Cisco Meraki, Cisco TrustSec, and Software-Defined Access (SD-Access).

· Scripting and automation experience using Python, Ansible, and REST APIs.

· Experience working in regulated enterprise environments.

· Relevant certifications, such as:

· CCNP or CCIE – Enterprise Wireless or Security.

· Cisco ISE certification.

· Equivalent wireless networking certifications.

Tools & Technologies

· Cisco Identity Services Engine (ISE)

· Cisco Catalyst 9800 Wireless Controllers

· Cisco Wireless Access Points

· Cisco Catalyst Center

· Software-Defined Access (SD-Access)

· Cisco Meraki Wireless Platforms

· Cisco TrustSec and Security Group Tags (SGTs)

· IEEE 802.1X, MAB, RADIUS, and TACACS+

· Active Directory (AD), LDAP, PKI, and MDM integrations

· Wireless Survey, Spectrum Analysis, and Monitoring Tools

· Python, Ansible, and REST APIs