CISCO ISE LEAD+ NAC || Santa Clara (5 days Onsite)

CISCO ISE LEAD+ NAC 

Santa Clara (5 days Onsite)

Onsite Interview Mandatory

We are seeking an experienced Senior Network Engineer to join our Infrastructure and Network Operations team in Santa Clara, California. The ideal candidate will possess deep expertise in Cisco Identity Services Engine (ISE), Network Access Control (NAC), enterprise wireless networking, and advanced routing and switching technologies. This role will be responsible for designing, implementing, securing, and supporting large-scale enterprise network environments while driving network modernization and automation initiatives.

Key Responsibilities

Network Access Control & Security

• Design, deploy, and maintain Cisco ISE solutions for authentication, authorization, and accounting (AAA).
• Implement and support NAC policies utilizing 802.1X, MAB, posture assessment, profiling, and guest access services.
• Integrate Cisco ISE with Active Directory, PKI, MDM, SIEM, and other security platforms.
• Troubleshoot complex authentication and authorization issues across wired and wireless networks.
• Develop security policies and access controls to ensure compliance with organizational standards.

Wireless Networking

• Design, implement, and optimize enterprise wireless networks using Cisco Catalyst and Cisco Wireless LAN Controllers.
• Configure and troubleshoot wireless technologies including WPA2/WPA3, RF optimization, roaming, QoS, and high-density deployments.
• Conduct wireless surveys, capacity planning, and performance tuning.
• Support secure wireless onboarding and policy enforcement through Cisco ISE.

Routing & Switching

• Design, implement, and support enterprise LAN/WAN infrastructure.
• Configure and troubleshoot Cisco Catalyst switches and routing platforms.
• Manage Layer 2 and Layer 3 technologies including:
  • VLANs
  • STP/RSTP/MST
  • EtherChannel
  • HSRP/VRRP
  • OSPF
  • BGP
  • EIGRP
  • Multicast
• Perform network performance analysis, capacity planning, and optimization.

Operations & Engineering

• Lead network infrastructure projects from design through deployment.
• Create and maintain network architecture diagrams, operational procedures, and technical documentation.
• Participate in incident response and root cause analysis for critical network outages.
• Collaborate with security, systems, cloud, and application teams to support business initiatives.
• Evaluate emerging networking and security technologies and recommend improvements.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent experience.
• 8+ years of enterprise network engineering experience.
• 5+ years of hands-on experience with Cisco ISE and NAC deployments.
• Strong expertise in Cisco Catalyst switching and routing platforms.
• Extensive experience with enterprise wireless technologies.
• Deep understanding of:
  • 802.1X
  • RADIUS
  • TACACS+
  • AAA services
  • DHCP
  • DNS
  • TCP/IP
• Experience integrating ISE with Active Directory and certificate services.
• Strong troubleshooting and analytical skills.
• Excellent verbal and written communication skills.

Preferred Qualifications

• Cisco certifications such as CCNP Enterprise, CCNP Security, or CCIE.
• Experience with Cisco DNA Center and Software Defined Access (SDA).
• Experience with network automation using Python, Ansible, REST APIs, or Terraform.
• Knowledge of cloud networking in Azure, AWS, or Google Cloud.
• Experience with network monitoring and analytics tools.
• Understanding of Zero Trust and modern security architectures.

Desired Skills

• Cisco ISE
• Network Access Control (NAC)
• Cisco Wireless
• Catalyst 9K Series
• OSPF, BGP, EIGRP
• SDA Fabric
• Cisco DNA Center
• 802.1X Authentication
• Network Security
• Python Automation
• Enterprise LAN/WAN