Network Access Control

Job Title:
Network Access Control (NAC) Specialist – L3

Location:
Pune

Department:
Network Security Operations / IT Infrastructure Security

Job Purpose
The NAC Specialist (L3) will be responsible for
advanced-level configuration, troubleshooting, and optimization of ForeScout NAC systems
, along with supporting integration across enterprise network infrastructure. The role involves
end-to-end management of NAC operations, policy enforcement, compliance, incident resolution
, and collaboration with internal and external stakeholders to ensure robust network access security.

Educational Qualification

• B.E / B.Tech in Electronics, Computer Science, or Information Technology from a reputed university or equivalent.

Experience

• Minimum 5+ years of experience in IT Service Management and Network Security Operations.
• Proven expertise in Incident, Problem, Change, and Vendor Management processes.

Certifications (Mandatory / Preferred)

• CCNA (mandatory), CCNP preferred or trained.
• FSCP Certified / Accredited (ForeScout Certified Professional) – mandatory or equivalent training.
• ITIL Foundation Certification preferred.

Core Technical Skillset

• Hands-on experience with ForeScout NAC – Enterprise Manager, CounterACT appliances, and policy configuration.
• Expertise in configuring and deploying policy enforcement rules and troubleshooting NAC posture failures.
• Strong understanding of Network Security concepts including 802.1X, certificate-based authentication, risk mitigation, and endpoint compliance.
• In-depth knowledge of Cisco and other OEMs' network elements – routers, switches, WLCs, firewalls, and ACI fabrics.

• Strong working knowledge of the following tools and platforms:

• ForeScout, Cisco ISE, Cisco Prime, Splunk, Broadcom Spectrum (DX NetOps)

• CyberArk, Ansible, NetRequest, SPDW, Essas
• MS Office, ServiceNow, JIRA

Core Responsibilities

• NAC Operations & Incident Management
• Handle advanced troubleshooting of NAC systems, addressing server-level and enforcement issues.
• Perform root cause analysis (RCA) for recurring NAC incidents.
• Manage high-severity incident escalations and coordinate with customer L3/L4 or engineering teams.
• Ensure timely closure of NAC-related incidents, problems, and change requests using ITSM tools (ServiceNow, JIRA).
• Configuration & Policy Management
• Support new NAC configurations, upgrades, and migrations.
• Manage ForeScout policy engines for device classification, compliance, and access segmentation.
• Configure integration with switches, WLCs, and virtual machines using SNMP, SSH, or APIs.
• Troubleshoot and analyze posture validation failures, guest access, and 802.1X certificate issues.
• Compliance, Audit, and Reporting
• Conduct NAC policy audits and ensure compliance enforcement across network endpoints.
• Maintain account access compliance, perform alarm and event management, and manage system health checks.
• Generate performance and compliance reports (daily, weekly, and monthly).
• Manage and track NAC certificate renewals and integrations.
• Automation & Process Improvement
• Collaborate with automation teams to enhance monitoring and alerting systems.
• Support deployment of NAC automation scripts post-sign-off by engineering.
• Design and implement classification rules, plugins, and remediation workflows to optimize NAC performance.
• Identify and execute continuous improvement opportunities in NAC operations and incident processes.
• Documentation & Governance
• Create and maintain technical documentation, as-built network diagrams, inventory, and SOPs/runbooks.
• Participate in technical design reviews, policy governance, and advisory boards.
• Update knowledge bases and ITSM documentation with latest RCA findings and configuration updates.

Behavioral Competencies

• Strong communication and interpersonal skills (verbal & written).
• Proactive and customer-oriented mindset.
• Team player with cross-functional collaboration capability.
• Analytical thinker with a structured approach to troubleshooting.
• Willingness to work extended hours or rotational shifts during critical incidents.

Department Mapping
Primary Department:
Network Security Operations

Sub-Function:
NAC Engineering & Compliance Management

Interfaces With

• Network Operations (NOC) & Security (SOC) Teams
• Automation & ITSM Teams
• Customer L3 / Engineering Teams
• Vendor Support (ForeScout, Cisco, Broadcom)

Skills: operations,teams,management,fore scout nac,automation,sme,itil,network security,policy deployment,compliance,vendore management,troubleshooting,security