Lead the migration of a federal agency's network access control platform from ForeScout CounterACT to Cisco ISE, designing and managing AAA services, 802.1X authentication, and device compliance controls. This role is ideal for a senior network security engineer with deep Cisco ISE expertise who thrives in government modernization environments.
What you'll do
- Design, deploy, and maintain Cisco ISE on clustered Cisco SNS 3715 appliances, ensuring high availability and consistent policy enforcement
- Lead migration of legacy ForeScout CounterACT policies, device groups, and access rules into ISE policy sets and authorization profiles
- Configure and troubleshoot RADIUS, TACACS+, 802.1X, device administration, and endpoint authentication across wired and wireless networks
- Integrate Cisco ISE with Active Directory, LDAP, and Cisco 9800 WLCs, including guest portals, wireless onboarding, and policy-driven access control
- Deploy and maintain certificate-based authentication (EAP-TLS) and PKI integrations for device and user authentication
- Perform health checks, system upgrades, security event monitoring via syslog, and root cause analysis for authentication failures
- Mentor junior staff, document solutions through SOPs and engineering designs, and collaborate with engineering, operations, and compliance teams
Mission
Agile Defense supports a federal agency modernizing its identity and access control infrastructure. The agency is transitioning from legacy ForeScout NAC/NAM systems to Cisco ISE to strengthen identity-based access controls, improve authentication workflows, and align with Zero Trust security principles.
Required skills
- Cisco ISE design, deployment, and troubleshooting
- RADIUS and TACACS+ authentication and authorization
- 802.1X/EAP methods for wired and wireless networks
- Device profiling, posture checks, and endpoint compliance
- Certificate-based authentication and PKI integration
- Active Directory and LDAP integration
- Cisco 9800 Wireless LAN Controller integration
- ForeScout CounterACT migration and policy mapping
- Zero Trust architecture and segmentation
- Network access control (NAC/NAM) platforms