Cisco Network Engineer

Key Responsibilities
Design, configure, and deploy Cisco ISE for wired and wireless NAC (authentication, authorization, profiling, posture, and guest access).Configure or guide switch-side settings (802.1X, MAB, dot1x timers, VLANs, dACLs) in coordination with the network team.Collaborate with the Server/AD team to align Group Policy Objects (GPOs) for supplicant configuration and certificate/policy push.Partner with Desktop Support to pilot-test endpoint connectivity, troubleshoot failures, and refine the rollout approach before mass deployment.Plan and execute phased, low-risk mass deployment across sites and locations.Help develop and maintain High-Level and Low-Level Solution Design documents in collaboration with the architecture team.Create authentication/authorization policy matrices, failure/exception handling procedures, and rollback plans.Troubleshoot NAC-related issues (authentication failures, VLAN assignment errors, certificate issues) during and after go-live.Document configurations, runbooks, and knowledge transfer material for BAU support handover.
Required Skills & Experience
4+ years in network/security engineering, with hands-on Cisco ISE deployment experience (beyond administration and support).Strong understanding of 802.1X, MAB, RADIUS, EAP methods, and Cisco switch configuration (Catalyst series).Experience with wireless NAC integration (Cisco WLC or similar).Working knowledge of Active Directory, Group Policy, and certificate-based authentication (PKI/NDES) is preferred.Prior experience running a phased/mass NAC rollout in a live enterprise environment.Strong cross-functional coordination skills across network, server, security, and desktop teams.
Good to HaveCisco certifications (CCNP Security / ISE specialist).Experience with Cisco DNA Center or Identity Services integration with SIEM/NAC ecosystems.