Job Description

Role - Network SME/ Architect Location - Santa Clara, CA 95054 (Onsite) Type: Contract The client will reimburse the cost of the flight ticket for the final face-to-face interview if the candidate is non-local. ISE+NAC is what we need with good hand on experience on Core NAC and ISE implementation as L4 Face to face final Interview with Customer in Santa Clara office and its 5 days a week role

• Design, deploy, configure, and maintain Cisco ISE for network access control (NAC) and identity-based policy enforcement.
• Implement 802.1X authentication, MAB (MAC Authentication Bypass), and posture assessment for wired and wireless networks.
• Manage device profiling, guest access portals, BYOD policies, and certificate-based authentication (EAP-TLS/PEAP).
• Integrate ISE with Active Directory, PKI, and other authentication systems.
• Develop and maintain ISE policies, network device groups, and authorization profiles.
• Monitor ISE logs and troubleshoot authentication and authorization issues.
• Perform ISE patching, backup, and system upgrades as part of lifecycle management.

• Configure, manage, and troubleshoot Cisco ASA, Firepower (FTD), Palo Alto, or Fortinet firewalls.
• Create and maintain access control policies (ACLs), NAT, VPNs, and security zones.
• Monitor and analyze firewall logs to detect anomalies or potential security breaches.
• Collaborate with security teams to enforce Zero Trust and micro-segmentation strategies.
• Conduct firewall performance tuning and ensure compliance with security standards.

• Collaborate with network operations and security teams to ensure consistent policy enforcement across wired, wireless, and VPN environments.
• Participate in incident response, root cause analysis, and remediation for security events.
• Develop and maintain network documentation, diagrams, and standard operating procedures (SOPs).

• Bachelor's degree in Computer Science, Information Technology, or related field.
• 5+ years of experience in network security engineering.
• Hands-on experience with Cisco ISE (2.x or 3.x) deployment and management.
• Strong understanding of RADIUS, TACACS+, EAP, 802.1X, VLANs, and network access control.
• Experience with Cisco ASA, Firepower, or next-generation firewalls (NGFW).
• Proficiency with Cisco Catalyst switches, wireless controllers, and VPN technologies.
• Familiar with network monitoring tools (SolarWinds, Splunk, Wireshark, etc.).
• Cisco certifications such as CCNP Security, CCIE Security, or Cisco ISE Specialist are highly desirable.

• Experience with multi-vendor firewall platforms (Palo Alto, Fortinet, Check Point).
• Understanding of Zero Trust Network Access (ZTNA) and SASE architectures.
• Familiarity with automation and scripting (Python, Ansible) for network configurations.

For applications and inquiries, contact: hirings@openkyber.com

Job Tags

Similar Jobs