Job Title: Cisco ISE SME (Subject Matter Expert)

Experience: 815 Years
Location: Pune
Department: Network Security & Infrastructure

Role Summary

We are seeking an experienced Cisco ISE SME to design, implement, support, and optimize Cisco Identity Services Engine (ISE) solutions across enterprise environments. The candidate will be responsible for Network Access Control (NAC), 802.1X authentication, device profiling, posture assessment, guest access, and integration with security platforms to ensure secure network access.

Key Responsibilities

Design & Implementation

Design and deploy Cisco ISE solutions for enterprise environments.
Implement wired, wireless, and VPN authentication using 802.1X.
Configure TACACS+ administration services for network device access control.
Design and implement TrustSec, SGT (Security Group Tags), and micro-segmentation solutions.
Configure guest access, BYOD onboarding, and posture assessment policies.
Integrate Cisco ISE with Active Directory, LDAP, PKI, and Azure AD.

Operations & Support

Provide L3 support for Cisco ISE infrastructure.
Troubleshoot authentication, authorization, and accounting (AAA) issues.
Investigate endpoint profiling and posture compliance issues.
Resolve certificate-related and EAP authentication problems.
Perform upgrades, patches, backups, and disaster recovery activities.
Conduct root cause analysis (RCA) for major incidents.

Security & Integration

Integrate Cisco ISE with:

Cisco DNA Center
Cisco Secure Firewall (FMC/FTD)
Cisco Secure Access
Cisco SecureX
Microsoft Active Directory
MDM solutions (Intune, MobileIron, Workspace ONE)

Support Zero Trust and NAC initiatives.
Implement compliance and security policies.

Monitoring & Optimization

Monitor ISE health, performance, and capacity.
Optimize authentication workflows and policy sets.
Review logs and reports for security incidents.
Develop automation scripts where applicable.

Required Technical Skills

Cisco Technologies

Cisco ISE 2.x/3.x Administration and Troubleshooting
802.1X Authentication (EAP-TLS, PEAP, EAP-FAST)
TACACS+, RADIUS, AAA
TrustSec and SGT
Device Profiling and Posture Services
Guest and BYOD Services

Networking

TCP/IP, VLANs, Routing & Switching
Wireless LAN Controllers (Cisco/Aruba)
VPN Technologies
DHCP, DNS, PKI Infrastructure

Security

NAC Solutions
Zero Trust Architecture
Identity and Access Management (IAM)
Certificate Management

Preferred Skills

Cisco Certified Specialist Security Identity Management Implementation
CCNP Security
Forescout NAC
Experience with automation using Python, REST APIs, Ansible
Knowledge of Cisco DNA Center and SDA (Software Defined Access)

Key Competencies

Strong troubleshooting and analytical skills.
Experience handling critical incidents and escalations.
Ability to perform RCA and problem management.
Excellent stakeholder communication skills.
Ability to lead technical discussions with vendors and customers.

Manager - Cloud & Security Customer Service Operations