Network Security Engineer

Agile Defense
United States
Workplace: OnsiteFull timeUSD 100,000 - 115,000 annuallyFunction: CybersecurityExperience: 8+ yearsEducation: bachelorsSkills: ["Communication","Mentoring","Knowledge sharing","Troubleshooting"]

Design, configure, monitor, and troubleshoot Cisco Identity Services Engine (ISE) as a NAC/NAM access control platform. Own Cisco ISE AAA services (RADIUS/TACACS+), wired and wireless 802.1X authentication, device administration policies, and posture/compliance checks. Lead migration from ForeScout CounterACT to Cisco ISE, integrate with Active Directory and LDAP, support Cisco 9800 WLC integrations, and perform root-cause analysis using ISE logs and syslog.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Agile Defense
Agile Defense
15 hours ago

Network Security Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Design, configure, monitor, and troubleshoot Cisco Identity Services Engine (ISE) as a NAC/NAM access control platform. Own Cisco ISE AAA services (RADIUS/TACACS+), wired and wireless 802.1X authentication, device administration policies, and posture/compliance checks. Lead migration from ForeScout CounterACT to Cisco ISE, integrate with Active Directory and LDAP, support Cisco 9800 WLC integrations, and perform root-cause analysis using ISE logs and syslog.
Location: United States
Workplace: Onsite
Employment Type: Full time
Job Function: Cybersecurity
Seniority: Mid level

Key Responsibilities

  • •Design, configure, monitor, and troubleshoot Cisco ISE as a NAC/NAM platform, including AAA services, device administration policies, and wired/wireless 802.1X authentication.
  • •Deploy, configure, and maintain Cisco ISE on two clustered Cisco SNS 3715 appliances, ensuring high availability and consistent policy enforcement.
  • •Support migration from ForeScout CounterACT to Cisco ISE by reviewing legacy policies and mapping device groups and access rules into ISE policy sets.
  • •Integrate and maintain Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group-based authorization, and directory-based authentication workflows.
  • •Monitor security events using ISE logs and syslog, perform root-cause analysis for authentication/access issues, and execute upgrades/migrations and documentation through SOPs.

Pay and Benefits

Salary: USD 100,000 - 115,000 annually
Perks:Health InsuranceLife InsurancePaid LeaveHoliday PayDisabilityRetirementLearning Budget

Key Requirements

  • •8 years of experience in a large government organization with 5 years in technical leadership.
  • •4 years implementing and troubleshooting Cisco ISE, including RADIUS/TACACS+ authentication and authorization policies.
  • •Experience with 802.1X/EAP methods for wired and wireless access, including device profiling, posture checks, and endpoint compliance.
  • •Hands-on certificate-based authentication (EAP TLS) with PKI integrations.
  • •Experience integrating Cisco ISE with Active Directory and LDAP for identity lookups and group-based policy decisions.
Experience:8+ yearsGovernmentNetwork securityZero TrustIdentity and access managementNAC
Education:Bachelor's in Information Technology, Cybersecurity, or a related field
Skills:CommunicationMentoringKnowledge sharingTroubleshooting
Certifications:Cisco CCNP SecurityCisco ISE Specialist
Tech Stack:Cisco Identity Services Engine (ISE)Cisco CCNP SecurityCisco ISE SpecialistForeScout CounterACTRADIUSTACACS+802.1XEAP TLSPKIActive Directory (AD)LDAPCisco 9800 Wireless LAN ControllersCisco SNS 3715SyslogZero TrustNACNAC/NAM

Eligibility

Security Clearance:Public Trust

Company Brief

Agile Defense
Provides cybersecurity services including managed detection and response, incident response, vulnerability assessments, and security operations to help organizations detect, respond to, and remediate cyber threats while meeting regulatory and compliance requirements.
Industry: Cybersecurity
Website