Job Description

n

n
Design, configure, and deploy Cisco ISE for wired and wireless NAC (authentication, authorization, profiling, posture, and guest access).
n
Configure or guide switch-side settings (802.1X, MAB, dot1x timers, VLANs, dACLs) in coordination with the network team.
n
Collaborate with the Server/AD team to align Group Policy Objects (GPOs) for supplicant configuration and certificate/policy push.
n
Partner with Desktop Support to pilot-test endpoint connectivity, troubleshoot failures, and refine the rollout approach before mass deployment.
n
Plan and execute phased, low-risk mass deployment across sites and locations.
n
Help develop and maintain High-Level and Low-Level Solution Design documents in collaboration with the architecture team.
n
Create authentication/authorization policy matrices, failure/exception handling procedures, and rollback plans.
n
Troubleshoot NAC-related issues (authentication failures, VLAN assignment errors, certificate issues) during and after go-live.
n
Document configurations, runbooks,



and knowledge transfer material for BAU support handover.
n

Required Skills & Experiencen n
4+ years in network/security engineering, with hands-on Cisco ISE deployment experience (beyond administration and support).
n
Solid understanding of 802.1X, MAB, RADIUS, EAP methods, and Cisco switch configuration (Catalyst series).
n
Experience with wireless NAC integration (Cisco WLC or similar).
n
Working knowledge of Active Directory, Group Policy, and certificate-based authentication (PKI/NDES) is preferred.
n
Prior experience running a phased/mass NAC rollout in a live enterprise environment.
n
Robust cross-functional coordination skills across network, server, security, and desktop teams.
n

Valuable to Haven n
Cisco certifications (CCNP Security / ISE specialist).
n
Experience with Cisco DNA Center or Identity Services integration with SIEM/NAC ecosystems.
n

n
J-18808-Ljbffr

📌 Network Security Engineer New South Wales
🏢 Zone IT Solutions
📍 New South Wales