Network Security Engineer (NAC) - North Central (Remote in the U.S.)

We are looking for a Network Security Engineer with deep expertise in Network Access Control (NAC) to lead and support NAC implementations in complex enterprise environments. The ideal candidate will have extensive hands-on experience with Cisco Identity Services Engine (ISE) and a strong understanding of 802.1X, RADIUS, posture assessment, and endpoint profiling. This is a consulting-focused role that requires strong client-facing skills and the ability to design, implement, and troubleshoot NAC solutions in diverse network infrastructures.

Key Responsibilities:

• Lead the design, deployment, and operational support of NAC solutions, primarily using Cisco ISE.
• Work with clients to develop access control policies, device profiling, posture assessments, and guest/BYOD workflows.
• Configure and troubleshoot 802.1X, MAB, RADIUS, TACACS+, and integration with AD, PKI, and other identity stores.
• Integrate NAC with other security tools such as firewalls, SIEMs, MDM solutions, and EPP/EDR platforms.
• Provide strategic guidance to clients on NAC policy development, user segmentation, and zero trust principles.
• Deliver documentation, runbooks, and knowledge transfer for ongoing client operations.
• Support NAC assessments, policy refinement, and incident response scenarios where NAC plays a role.
• Work in tandem with network, security, and desktop teams to ensure alignment across all access control layers.

Required Qualifications:

• 3+ years of experience implementing and managing Cisco ISE in enterprise environments.
• Strong understanding of network security concepts including 802.1X, RADIUS, EAP-TLS, device profiling, and posture checks.
• Experience integrating ISE with Active Directory, certificate authorities, and third-party MDM/SIEM tools.
• Solid knowledge of LAN switching, VLANs, and network architecture required to support NAC deployments.
• Familiarity with NAC in both wired and wireless environments, including Cisco Catalyst, Cisco WLC, or Meraki infrastructure.
• Experience working in a consulting or MSP environment and managing multiple projects or clients.
• Excellent communication skills, both written and verbal, for stakeholder engagement and documentation.

Preferred Qualifications:

• Experience with other NAC platforms such as Aruba ClearPass, Forescout, or Portnox.
• Cisco certifications such as CCNP Security, Cisco ISE Specialist, or relevant NAC vendor certifications.
• Understanding of Zero Trust Network Access (ZTNA) and how NAC fits into a modern segmentation and access strategy.
• Experience with guest access portals, self-registration, and contractor device onboarding.