Cisco ISE Network Engineer

Quick Facts

• Cisco ISE Network Engineer supporting a federal civilian customer
• 100% onsite on Capitol Hill, Washington, DC (Mon–Fri, 10:00 AM–6:00 PM ET)
• Focus: ~70% hands-on Cisco ISE support; ~20% routing/switching; ~10% general infrastructure

Description

Serve as the primary engineer for daily Cisco Identity Services Engine (ISE) operations, including administration, maintenance, and troubleshooting of identity, authentication, and network access control. You will resolve AAA-related authentication/authorization/accounting issues, manage access control policies, monitor platform health, and perform upgrades, patching, backups, and certificate management. You will also support Cisco routing and switching and general infrastructure changes as needed.

Responsibilities

• Troubleshoot and resolve AAA/authentication and access-control issues
• Configure and support 802.1X, MAB, RADIUS, TACACS+, and certificate-based authentication
• Investigate endpoint/user/device connectivity issues tied to network access control
• Support endpoint profiling, posture assessment, guest services, and device administration policies
• Monitor Cisco ISE health, node performance, replication status, and system alerts
• Perform upgrades, patching, backups, certificate management, and platform maintenance
• Analyze logs and conduct root-cause analysis for complex incidents
• Support integrations with Active Directory, PKI, Cisco switching, wireless, and other security technologies
• Support Cisco routing and switching; troubleshoot Layer 2/Layer 3 connectivity
• Assist with implementation/maintenance of infrastructure changes
• Collaborate with network, security, server, and application teams; participate in incident response and maintenance
• Maintain technical documentation, procedures, and operational runbooks; provide status updates