Senior Network Architect

Job DescriptionWe are seeking a seasoned Cisco ISE Network Engineer to join our team. The ideal candidate will have expertise in designing, implementing, and maintaining corporate network infrastructure while prioritizing security, reliability, and scalability.The successful candidate will lead Cisco ISE deployments and architecture design, focusing on RADIUS/802.1X authentication, EAP-TLS, TrustSec policies, TACACS, and AAA configuration on NADs. They will oversee and tune guest/sponsor portals, BYOD onboarding, and custom portal solutions for secure and flexible network access.Design and Implement Network Infrastructure: Develop and maintain high-performance, highly available, and secure network architectures that meet the organization's business needs.Lead Cisco ISE Deployments: Design and implement Cisco ISE solutions, including architecture, deployment, and configuration of RADIUS/802.1X authentication, EAP-TLS, TrustSec policies, TACACS, and AAA configuration on NADs.Manage Guest/Sponsor Portals and BYOD Onboarding: Oversee and tune guest/sponsor portals, BYOD onboarding, and custom portal solutions for secure and flexible network access.Integrate Network Systems with Cloud Platforms: Integrate network systems with Azure, AWS, Active Directory, and third-party ecosystems for device identity/posture, application access, and security controls.Manage Certificate Lifecycle: Administer end-to-end certificate lifecycle for network services, ISE portals, and device authentication (CSR generation, CA signing, binding, backups, expiry management).Administer TACACS: Manage TACACS for secure device management and policy-based access to network infrastructure.Automate Network Management: Automate network management with Python, Ansible, and REST APIs; create workflows with Cisco DNA Center (DNAC), automate inventory sync with CMDB (Freshworks, ServiceNow), and ensure API governance.Implement SD-Access Solutions: Implement and support SD-Access solutions, including segmentation, policy deployment, and campus fabric operations.Troubleshoot Complex Network Issues: Troubleshoot complex wireless and wired network issues, conduct log analysis, resolve authentication failures, and optimize LAN/WAN performance.Required Skills and QualificationsCisco ISE Administration: Advanced proficiency in Cisco ISE administration, including setup, configuration, and troubleshooting.DNA Center and SD-Access: In-depth knowledge of Cisco DNA Center and SD-Access solutions, including architecture, deployment, and operation.Cloud Integration: Familiarity with cloud integration platforms such as Azure, AWS, and Active Directory.Automation and Scripting: Proven skills in automation and scripting using Python, Ansible, and REST APIs.Network Security: Deep understanding of network security principles, protocols, and best practices.Communication and Collaboration: Strong communication and collaboration skills, with the ability to work effectively with cross-functional teams and global stakeholders.BenefitsThis role offers a comprehensive benefits package, including medical, dental, and vision insurance, 401(k) matching, and paid time off.Preferred Qualifications5+ Years of Network/Security Engineering Experience: A minimum of 5 years of experience in network/security engineering, with a focus on secure Cisco environments.Certifications: CCNP Security or CCIE certification, or equivalent experience.