Recently postedEngineering

Sr. Cisco ISE Engineer

Cloud Destinations LLCUnited States🇺🇸United States

Quick overview

SeniorityMid Senior

Work modeHybrid

LocationUnited States

Job description

Job description:

Sr. Cisco ISE Engineer(Remote)

Note: This is a W2 only role — C2C, C2H will not be considered

Position Overview:

Sr. Cisco ISE Engineer responsible for secure enterprise wireless access, network access control and CDI architecture. This role owns architecture standards, leads complex design and migration initiatives, and serves as the technical authority for Cisco Identity Services Engine (ISE), wireless local area networks (WLAN), IEEE 802.1X policy and CDI solutions. The architect will translate business and security requirements into scalable, resilient designs and provide technical leadership through implementation and operational transition. One position is available.

Responsibilities:

Design, document and govern enterprise Cisco ISE, WLAN and CDI architectures, standards and reference designs.
Architect and refine Cisco ISE deployments, including distributed nodes, policy sets, IEEE 802.1X, MAC Authentication Bypass (MAB), profiling, posture, certificates, guest access, bring your own device (BYOD), Cisco TrustSec and Security Group Tags (SGTs).
Lead wireless architecture and design across controllers, access points, radio frequency planning, authentication, roaming, high availability, segmentation and quality of service.
Define integration patterns for Active Directory (AD), Lightweight Directory Access Protocol (LDAP), public key infrastructure (PKI), mobile device management (MDM), security platforms and network infrastructure.
Lead design reviews, technology refreshes, migrations, cutovers and lifecycle upgrades with validation and rollback plans.
Drive complex troubleshooting and root-cause analysis for authentication, authorization, endpoint onboarding, wireless performance and connectivity issues.
Partner with security, LAN, WAN, cloud, endpoint and tooling teams to align access policies, segmentation, visibility and automation goals.
Create high-quality architecture documents, diagrams, implementation guidance, operational runbooks and knowledge-transfer materials.
Contribute to configuration, compliance and testing automation using Python, Ansible and REST application programming interfaces (APIs).

Qualifications:

10+ years of enterprise network engineering or architecture experience, including substantial experience with network access control and wireless networking.
Expert-level production design and administration experience with Cisco ISE, including distributed deployments, policy services, profiling, certificates and integrations with AD/LDAP and MDM platforms.
Deep knowledge of enterprise WLAN design, including Cisco wireless platforms, Wi-Fi standards, radio frequency fundamentals, roaming, authentication, guest access, segmentation, quality of service and high availability.
Strong understanding of zero-trust access, identity-based policy, endpoint onboarding and network segmentation concepts.
Experience designing or supporting CDI solutions and integrating connected endpoints with secure network access services.
Proven ability to lead complex technical designs, migrations, troubleshooting and stakeholder reviews.
Ability to collaborate openly with architects, engineers, project managers and customer stakeholders and communicate technical information clearly.

Preferred: Experience with Cisco Catalyst Center, Cisco Wireless LAN Controllers, Cisco Catalyst 9800, Cisco Meraki, Cisco TrustSec and Software-Defined Access (SD-Access). Scripting and automation experience using Python, Ansible and REST APIs. Experience in a regulated enterprise environment.

• Preferred certifications: Cisco Certified Network Professional (CCNP) or Cisco Certified Internetwork Expert (CCIE) in Enterprise Wireless or Security; Cisco ISE certification; or an equivalent wireless certification.

Tools and Technologies: