Design, configure, and deploy Cisco ISE for wired and wireless NAC (authentication, authorization, profiling, posture, and guest access).
Configure or guide switch-side settings ******X, MAB, dot1x timers, VLANs, dACLs) in coordination with the network team.Collaborate with the Server/AD team to align Group Policy Objects (GPOs) for supplicant configuration and certificate/policy push.Partner with Desktop Support to pilot-test endpoint connectivity, troubleshoot failures, and refine the rollout approach before mass deployment.Plan and execute phased, low-risk mass deployment across sites and locations.Help develop and maintain High-Level and Low-Level Solution Design documents in collaboration with the architecture team.Create authentication/authorization policy matrices, failure/exception handling procedures, and rollback plans.Troubleshoot NAC-related issues (authentication failures, VLAN assignment errors, certificate issues) during and after go-live.Document configurations, runbooks,



and knowledge transfer material for BAU support handover.Required Skills & Experience4+ years in network/security engineering, with hands-on Cisco ISE deployment experience (beyond administration and support).
Strong understanding of *****X, MAB, RADIUS, EAP methods, and Cisco switch configuration (Catalyst series).
Experience with wireless NAC integration (Cisco WLC or similar).
Working knowledge of Active Directory, Group Policy, and certificate-based authentication (PKI/NDES) is preferred.Prior experience running a phased/mass NAC rollout in a live enterprise environment.Robust cross-functional coordination skills across network, server, security, and desktop teams.Valuable to HaveCisco certifications (CCNP Security / ISE specialist).
Experience with Cisco DNA Center or Identity Services integration with SIEM/NAC ecosystems.
#J-*****-Ljbffr

📌 Network Security Engineer (Sydney)
🏢 Zone IT Solutions
📍 Sydney