Experience: 6+ years
Location: Hyderabad / Bangalore
Job Summary:
Seeking a Network Security Engineer with strong expertise in Cisco ISE (Identity Services Engine) and AAA (Authentication, Authorization, Accounting) to manage and secure enterprise network access. The role involves implementing NAC solutions, enforcing access policies, and ensuring secure authentication across network environments.
Key Responsibilities:
- Design, implement, and manage Cisco ISE for network access control (NAC).
- Configure and maintain AAA services using protocols like RADIUS and TACACS+.
- Integrate Cisco ISE with enterprise systems such as Active Directory, LDAP, and other identity sources.
- Develop and enforce network access policies, including 802.1X authentication, posture assessment, and guest access.
- Manage device profiling, endpoint compliance, and policy-based access control.
- Troubleshoot authentication and authorization issues across wired and wireless networks.
- Work with network teams to secure switches, routers, VPNs, and wireless controllers.
- Perform upgrades, patching, and health checks for Cisco ISE infrastructure.
- Implement logging, monitoring, and reporting for security compliance and audits.
- Collaborate with cybersecurity and infrastructure teams for incident response and risk mitigation.
Required Skills (Must Have):
- Strong hands-on experience with Cisco ISE (Policy Sets, Profiling, Posture, Guest Access).
- Deep understanding of AAA concepts (Authentication, Authorization, Accounting).
- Experience with RADIUS and TACACS+ protocols.
- Expertise in 802.1X, MAB (MAC Authentication Bypass).
- Integration experience with Active Directory / LDAP.
- Strong knowledge of networking fundamentals (TCP/IP, VLANs, routing, switching).
- Experience in troubleshooting NAC and authentication-related issues.
Good to Have:
- Experience with Cisco DNA Center / SD-Access.
- Knowledge of Forescout or other NAC solutions.
- Exposure to firewalls (Palo Alto, Check Point) and network security tools.
- Understanding of Zero Trust Network Access (ZTNA) concepts.
- Relevant certifications such as CCNP Security / Cisco ISE certification.
