Senior Cisco Identity Services Engine (ISE) Engineer
- United States
Applications open in a new tab.
Job details
- Apply by
- Experience
- 10–15 years of Network/Security Engineering experience.
- Posting language
- English
- Posted
Original job description
Role: Senior Cisco Identity Services Engine (ISE) Engineer Location: Washington, DC (Onsite) Type: Full-Time Required Experience
- 10–15 years of Network/Security Engineering experience.
- Strong hands-on experience with Cisco ISE 3.x in large enterprise environments.
- Experience with Cisco ISE upgrades, patching, troubleshooting, administration, and multi-node deployments.
- Strong knowledge of 802.1X, RADIUS, EAP/EAP-TLS, NAC, AAA, Authentication & Authorization Policies.
- Experience with Active Directory integration, Security Groups, and Identity Sources.
- Strong understanding of PKI and Certificate Management, including server certificates, CA chains, certificate renewals, thumbprints, and certificate-based authentication.
- Experience with Cisco ISE vulnerability remediation, security patching, and production support.
- Hands-on experience with packet captures, ISE logs, authentication troubleshooting, and root cause analysis.
- Experience integrating Cisco ISE with:
- Cisco Catalyst
- Meraki
- Firewalls
- F5
- DNS
- Splunk/SIEM platforms
ServiceNow & Change Management
- Experience creating and managing ServiceNow Change Requests.
- Ability to write implementation, validation, rollback, and risk assessment plans.
- Experience executing:
- ISE upgrades and patching
- Certificate renewals
- DNS changes
- Policy updates
- Security group changes
- New integrations
- Infrastructure migrations
Incident & Support Experience
- Strong troubleshooting experience across: Endpoint → Switch/AP → ISE → Active Directory → Authorization Policy → Network Access
- Experience with major incidents, RCA, and Cisco TAC case management.
- Ability to diagnose authentication, authorization, certificate, and connectivity issues.
Infrastructure & Automation
- Experience with:
- Cisco ISE migrations and node deployments
- High Availability (HA) environments
- Splunk monitoring and alerting
- ServiceNow integrations
- Preferred experience with:
- Python
- Ansible
- Terraform
- REST APIs
- CI/CD Automation
Preferred Qualifications
- CCNP Enterprise / CCNP Security or equivalent.
- Experience with Cisco Catalyst, Meraki, Enterprise Wireless, Active Directory, PKI, Splunk, and ServiceNow.
- Experience in highly regulated enterprise environments.