Senior Security Consultant

Position Summary

Network Security Consultant specializing in Cisco ISE and NAC, with 7+ years of experience in enterprise network security. Skilled in ISE design, implementation, upgrades, troubleshooting, 802.1X, RADIUS, TACACS+, profiling, authentication/authorization, guest access, and integration with AD, network, firewall, and endpoint security solutions. Working knowledge of Cisco DNAC, SDA, and AWS..

Key Responsibilities

• 7+ years of experience in Network Security / Cisco ISE / Network Access Control (NAC).
• Strong hands-on experience with Cisco ISE implementation, configuration, administration, troubleshooting, upgrades, patching, and health checks.
• Experience designing and managing ISE Policy Sets, Authentication & Authorization policies and network access policies.
• Strong knowledge of 802.1X, RADIUS, TACACS+, EAP, MAB, endpoint profiling, posture assessment, and guest access.
• Deploy and operationalize TrustSec / Security Group Tag (SGT) policy architecture
• Experience integrating Cisco ISE with Microsoft Active Directory (AD), switches, routers, wireless infrastructure, firewalls, and endpoint security platforms.
• Hands-on troubleshooting of authentication/authorization failures, RADIUS/TACACS+, 802.1X, profiling, wireless access, and policy enforcement issues.
• Experience with ISE backup/restore, patching, upgrades, configuration changes, and incident troubleshooting.
• Optimize and troubleshoot 802.1X, MAB, profiling, posture, TrustSec, and pxGrid.
• Ability to monitor ISE nodes, services, authentication logs, system health, and security events.
• Good understanding of enterprise network security and AAA concepts.

Experience creating technical documentation, troubleshooting guides, incident reports, and configuration documents.

Basic Qualifications

• Bachelor’s degree in computer science, Information Technology, Engineering, or related field 
• 7+ years of experience in Network Security / Enterprise Network Infrastructure.
• Strong hands-on experience with Cisco ISE, including implementation, configuration, administration, troubleshooting, upgrades, patching, and NAC operations.
• Good understanding of NAC, 802.1X, RADIUS, TACACS+, authentication, authorization, and endpoint access control.
• Experience working with Cisco ISE integrations such as Active Directory, switches, wireless, firewalls, and endpoint security platforms.
• Familiar with other technologies like Cisco DNA Center (DNAC), Software-Defined Access (SDA) and AWS.
• Strong troubleshooting and incident-resolution skills in enterprise network security environments.

Preferred Qualifications

• Cisco Security: Cisco ISE, NAC, 802.1X, RADIUS, TACACS+, EAP, Device Profiling, Posture Assessment, Guest Access, Authentication & Authorization, Policy Sets, TrustSec.
• Identity & Integration: Microsoft Active Directory, Endpoint Security.
• Networking: Cisco/Aruba Switches, Routers, Wireless Access Points/Controllers, VLANs, CLI, Network Troubleshooting.
• Familiar with Technologies: Cisco DNA Center (DNAC), Software-Defined Access (SDA) and Cloud: AWS