About the Role :

We are looking for a Senior NAC Engineer with strong expertise in Aruba ClearPass or Cisco ISE, identity-based access, 802.1X, endpoint profiling, and Zero Trust security.

Key Responsibilities :

- Design and implement scalable NAC solutions across campus, branch, data center, and remote-access environments.

- Develop NAC architecture, policy frameworks, HLD/LLD documents, and deployment runbooks.

- Configure and manage Aruba ClearPass or Cisco ISE, including policy, profiling, posture, guest, BYOD, and integrations.

- Implement 802.1X, EAP-TLS, PEAP, EAP-TTLS, MAB, RADIUS, and TACACS+.

- Build role-based access using dynamic VLANs, dACLs, SGT/roles, and dynamic segmentation.

- Integrate NAC with Active Directory, LDAP, Entra ID/Azure AD, PKI, and certificate authorities.

- Implement endpoint profiling, posture assessment, compliance, and remediation for managed, unmanaged, and IoT/OT devices.

- Design Guest, BYOD, and certificate-based onboarding solutions.

- Integrate NAC with firewalls, SIEM/SOAR, ITSM, MDM/UEM, and security platforms.

- Provide L3 support for RADIUS/802.1X failures, certificate issues, authentication problems, and policy mis-hits.

- Perform NAC health checks, capacity planning, performance tuning, upgrades, and high-availability management.

- Maintain NAC policies, configurations, documentation, SOPs, and security compliance.

Mandatory Requirements :

- 3+ years of Network/Security Engineering experience with strong NAC expertise.

- Deep hands-on experience with Aruba ClearPass or Cisco ISE.

- Strong experience with NAC policy/service configuration, enforcement profiles, and role mapping.

- Experience managing NAC upgrades, clustering, redundancy, certificates, and licensing.

- Strong knowledge of 802.1X, EAP-TLS, PEAP, EAP-TTLS, MAB, RADIUS, and TACACS+.

- Experience with dynamic VLANs, dACLs, SGT/roles, and identity-based access.

- Experience integrating NAC with AD, LDAP, Entra ID/Azure AD, and PKI.

- Hands-on experience with device profiling, posture/compliance, and IoT/OT segmentation.

- Strong TCP/IP, VLAN, wired/wireless networking, and Zero Trust fundamentals.

- Proven L3 troubleshooting experience for complex NAC environments.

- Bachelor's degree in Computer Science, IT, or a related field.

Preferred :

- Certifications : Aruba ClearPass certifications, CCNP Security, Cisco SISE, CCIE Security, CISSP.

- Experience with Forescout, Portnox, FortiNAC, or Arista Agni.

- Knowledge of Python, REST APIs, and NAC automation.

- Experience with MDM/UEM, EDR/AV, SIEM/SOAR, and security integrations.