Design, configure, and deploy Cisco ISE for wired and wireless NAC (authentication, authorization, profiling, posture, and guest access).
Configure or guide switch-side settings ******X, MAB, dot1x timers, VLANs, dACLs) in coordination with the network team.
Collaborate with the Server/AD team to align Group Policy Objects (GPOs) for supplicant configuration and certificate/policy push.
Partner with Desktop Support to pilot-test endpoint connectivity, troubleshoot failures, and refine the rollout approach before mass deployment.
Plan and execute phased, low-risk mass deployment across sites and locations.
Help develop and maintain High-Level and Low-Level Solution Design documents in collaboration with the architecture team.
Create authentication/authorization policy matrices, failure/exception handling procedures, and rollback plans.
Troubleshoot NAC-related issues (authentication failures, VLAN assignment errors, certificate issues) during and after go-live.
Document configurations, runbooks,



and knowledge transfer material for BAU support handover.
Required Skills & Experience
4+ years in network/security engineering, with hands-on Cisco ISE deployment experience (beyond administration and support).
Strong understanding of *****X, MAB, RADIUS, EAP methods, and Cisco switch configuration (Catalyst series).
Experience with wireless NAC integration (Cisco WLC or similar).
Working knowledge of Active Directory, Group Policy, and certificate-based authentication (PKI/NDES) is preferred.
Prior experience running a phased/mass NAC rollout in a live enterprise setting.
Strong cross-functional coordination skills across network, server, security, and desktop teams.
Good to Have
Cisco certifications (CCNP Security / ISE specialist).
Experience with Cisco DNA Center or Identity Services integration with SIEM/NAC ecosystems.
#J-*****-Ljbffr

📌 Network Security Engineer (Sydney)
🏢 Zone IT Solutions
📍 Sydney