- Design, configure, and deploy Cisco ISE for wired and wireless NAC (authentication, authorization, profiling, posture, and guest access).
- Configure or guide switch-side settings (802.1X, MAB, dot1x timers, VLANs, dACLs) in coordination with the network team.
- Collaborate with the Server/AD team to align Group Policy Objects (GPOs) for supplicant configuration and certificate/policy push.
- Partner with Desktop Support to pilot-test endpoint connectivity, troubleshoot failures, and refine the rollout approach before mass deployment.
- Plan and execute phased, low-risk mass deployment across sites and locations.
- Help develop and maintain High-Level and Low-Level Solution Design documents in collaboration with the architecture team.
- Create authentication/authorization policy matrices, failure/exception handling procedures, and rollback plans.
- Troubleshoot NAC-related issues (authentication failures, VLAN assignment errors, certificate issues) during and after go-live.
- Document configurations, runbooks,



and knowledge transfer material for BAU support handover.

Required Skills & Experience

- 4+ years in network/security engineering, with hands-on Cisco ISE deployment experience (beyond administration and support).
- Strong understanding of 802.1X, MAB, RADIUS, EAP methods, and Cisco switch configuration (Catalyst series).
- Experience with wireless NAC integration (Cisco WLC or similar).
- Working knowledge of Active Directory, Group Policy, and certificate-based authentication (PKI/NDES) is preferred.
- Prior experience running a phased/mass NAC rollout in a live enterprise environment.
- Strong cross-functional coordination skills across network, server, security, and desktop teams.

Positive to Have

- Cisco certifications (CCNP Security / ISE specialist).
- Experience with Cisco DNA Center or Identity Services integration with SIEM/NAC ecosystems.

#J-18808-Ljbffr

📌 Network Security Engineer (New South Wales)
🏢 Zone IT Solutions
📍 New South Wales