Network Engineer

Overview

A UK-based engineering organisation is seeking an experienced Network Access Control (NAC) engineer to deliver a single, unified NAC solution supporting two major business divisions. This programme will enhance security, standardise access control, and centralise policy management across multiple UK sites.

Responsibilities

Lead the deployment, configuration, and implementation of Cisco Identity Services Engine (ISE) in enterprise environments.

Implement NAC policies, including 802.1X, MAB, and guest access workflows.

Integrate ISE with network infrastructure, including switching, wireless controllers, firewalls, Entrata ID, and Active Directory.

Conduct testing and validation: functional testing, fail‑over testing, and meet agreed acceptance criteria.

Troubleshoot complex access/authentication issues and provide early‑life support after go‑live.

Configure guest access: captive portal, onboarding workflows, and sponsor portal configuration.

Collaborate with security stakeholders to enforce compliance and security policy requirements.

Produce and maintain technical documentation (design artefacts, diagrams, operational procedures).

Provide a blend of on‑site and remote support during deployment and post‑implementation phases.

Support incident response and root‑cause analysis for security/access events.

Deliver knowledge transfer through workshops and training to internal IT teams.

Qualifications

Pass a BPSS security check.

Strong hands‑on experience delivering Cisco ISE 3.x (or later) implementations, including migration/transition of devices and services from prior NAC solutions.

Multi‑site enterprise deployment experience, including high‑availability design and implementation.

Experience with 802.1X for wired and wireless, MAC authentication bypass, and guest access with customisable workflows.

Integration experience with existing Cisco estate and Microsoft services, including familiarity with Microsoft NPS.

Strong operational capability in troubleshooting authentication, policy, certificate, and network‑access issues.

Certifications

CCNP preferred (or CCNA with extensive Cisco ISE delivery experience).

Preferred

Endpoint compliance/posture and profiling capabilities within ISE.

Integrations with third‑party security tools (e.g., SIEM).

#J-18808-Ljbffr