Senior Network Security Engineer (Cisco ISE/NAC)

Solution IT Inc. is looking for Senior Network Engineer (Cisco ISE / NAC) for one of its clients in Santa Clara, CA

Job Title: Senior Network Engineer (Cisco ISE / NAC)

Responsibilities:

Network Access Control & Security

• Design, deploy, and maintain Cisco ISE solutions for authentication, authorization, and accounting (AAA).
• Implement and support NAC policies utilizing 802.1X, MAB, posture assessment, profiling, and guest access services.
• Integrate Cisco ISE with Active Directory, PKI, MDM, SIEM, and other security platforms.
• Troubleshoot complex authentication and authorization issues across wired and wireless networks.
• Develop security policies and access controls to ensure compliance with organizational standards.

Wireless Networking

• Design, implement, and optimize enterprise wireless networks using Cisco Catalyst and Cisco Wireless LAN Controllers.
• Configure and troubleshoot wireless technologies including WPA2/WPA3, RF optimization, roaming, QoS, and high-density deployments.
• Conduct wireless surveys, capacity planning, and performance tuning.
• Support secure wireless onboarding and policy enforcement through Cisco ISE.

Routing & Switching

• Design, implement, and support enterprise LAN/WAN infrastructure.
• Configure and troubleshoot Cisco Catalyst switches and routing platforms.
• Manage Layer 2 and Layer 3 technologies including:

• VLANs
• STP/RSTP/MST
• EtherChannel
• HSRP/VRRP
• OSPF
• BGP
• EIGRP
• Multicast

• Perform network performance analysis, capacity planning, and optimization.

Operations & Engineering

• Lead network infrastructure projects from design through deployment.
• Create and maintain network architecture diagrams, operational procedures, and technical documentation.
• Participate in incident response and root cause analysis for critical network outages.
• Collaborate with security, systems, cloud, and application teams to support business initiatives.
• Evaluate emerging networking and security technologies and recommend improvements.

Required skills:

• Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent experience.
• 8+ years of enterprise network engineering experience.
• 5+ years of hands-on experience with Cisco ISE and NAC deployments.
• Strong expertise in Cisco Catalyst switching and routing platforms.
• Extensive experience with enterprise wireless technologies.
• Deep understanding of:

• 802.1X
• RADIUS
• TACACS+
• AAA services
• DHCP
• DNS
• TCP/IP

• Experience integrating ISE with Active Directory and certificate services.
• Strong troubleshooting and analytical skills.
• Excellent verbal and written communication skills.

Preferred Qualifications

• Cisco certifications such as CCNP Enterprise, CCNP Security, or CCIE.
• Experience with Cisco DNA Center and Software Defined Access (SDA).
• Experience with network automation using Python, Ansible, REST APIs, or Terraform.
• Knowledge of cloud networking in Azure, AWS, or Google Cloud.
• Experience with network monitoring and analytics tools.
• Understanding of Zero Trust and modern security architectures.

Work Site : Santa Clara, CA (5 Days Onsite)

Duration: 6 Months

Expected Start Date : Immediate

Number of Positions: 01

Please send your responses back to View email address on us.fitly.work

Thanks

Recruiting Team

SOLUTION IT INC

Work: View phone number on us.fitly.work / Extn 150 / 155

URL:



Confidentiality Notice: The material in this e-mail is intended only for the use of the individual to whom it is addressed and may contain information that is confidential, privileged, and exempt from disclosure under applicable law. If you are not the intended recipient(s), be advised that the unauthorized use, disclosure, copying, distribution, or the taking of any action in reliance on this information is strictly prohibited. If you have received this e-mail in error, please immediately contact the sender by reply email and destroy all copies of the original message. Thank you.

Under Bill s.1618 Title III passed by the 105th U.S. Congress this mail cannot be considered as "spam" as long as we include contact information and a remove link for removal from our mailing list. In order to not be in the recipients-list for this mail, please reply to us with "REMOVE" either in the subject or in the mail body. Please include all pertinent email addresses. Our apologies for any inconveniences caused by this mail.