Deputy General Manager - Network Operations & Support

Job Title: Cisco ISE SME (Subject Matter Expert)

Experience: 815 Years

Department: Network Security & Infrastructure

Role Summary

We are seeking an experienced Cisco ISE SME to design, implement, support, and optimize Cisco Identity Services Engine (ISE) solutions across enterprise environments. The candidate will be responsible for Network Access Control (NAC), 802.1X authentication, device profiling, posture assessment, guest access, and integration with security platforms to ensure secure network access.

Key Responsibilities

Design & Implementation

• Design and deploy Cisco ISE solutions for enterprise environments.
• Implement wired, wireless, and VPN authentication using 802.1X.
• Configure TACACS+ administration services for network device access control.
• Design and implement
• Configure guest access, BYOD onboarding, and posture assessment policies.
• Integrate Cisco ISE with Active Directory, LDAP, PKI, and Azure AD.

Operations & Support

• Provide L3 support for Cisco ISE infrastructure.
• Troubleshoot authentication, authorization, and accounting (AAA) issues.
• Investigate endpoint profiling and posture compliance issues.
• Resolve certificate-related and EAP authentication problems.
• Perform upgrades, patches, backups, and disaster recovery activities.
• Conduct root cause analysis (RCA) for major incidents.

Security & Integration

• Integrate Cisco ISE with:
  • Cisco DNA Center
  • Cisco Secure Firewall (FMC/FTD)
  • Cisco Secure Access
  • Cisco SecureX
  • Microsoft Active Directory
  • MDM solutions (Intune, MobileIron, Workspace ONE)
• Support Zero Trust and NAC initiatives.
• Implement compliance and security policies.

Monitoring & Optimization

• Monitor ISE health, performance, and capacity.
• Optimize authentication workflows and policy sets.
• Review logs and reports for security incidents.
• Develop automation scripts where applicable.

Required Technical Skills

Cisco Technologies

• Cisco ISE 2.x/3.x Administration and Troubleshooting
• 802.1X Authentication (EAP-TLS, PEAP, EAP-FAST)
• TACACS+, RADIUS, AAA
• TrustSec and SGT
• Device Profiling and Posture Services
• Guest and BYOD Services

Networking

• TCP/IP, VLANs, Routing & Switching
• Wireless LAN Controllers (Cisco/Aruba)
• VPN Technologies
• DHCP, DNS, PKI Infrastructure

Security

• NAC Solutions
• Zero Trust Architecture
• Identity and Access Management (IAM)
• Certificate Management

Preferred Skills

• Cisco Certified Specialist Security Identity Management Implementation
• CCNP Security
• CCIE Security (Preferred)
• Experience with automation using Python, REST APIs, Ansible
• Knowledge of Cisco DNA Center and SDA (Software Defined Access)

Key Competencies

• Strong troubleshooting and analytical skills.
• Experience handling critical incidents and escalations.
• Ability to perform RCA and problem management.
• Excellent stakeholder communication skills.
• Ability to lead technical discussions with vendors and customers.

Typical L3 Interview Topics

• Cisco ISE deployment architecture (PAN, MnT, PSN).
• EAP-TLS authentication flow.
• 802.1X wired and wireless authentication troubleshooting.
• TACACS+ device administration.
• TrustSec and SGT implementation.
• ISE certificate management and PKI integration.
• Guest/BYOD onboarding workflows.
• ISE upgrade and migration strategies.
• High Availability and Disaster Recovery.
• Integration with Aruba WLC, Cisco WLC, and Firewalls.

Skills Required
certificate management