Senior Cisco Identity Services Engine (ISE) Engineer

Role: Senior Cisco Identity Services Engine (ISE) Engineer
Location: Washington, DC (Onsite)
Type: Full-Time

Required Experience

• 10–15 years of Network/Security Engineering experience.
• Strong hands-on experience with Cisco ISE 3.x in large enterprise environments.
• Experience with Cisco ISE upgrades, patching, troubleshooting, administration, and multi-node deployments.
• Strong knowledge of 802.1X, RADIUS, EAP/EAP-TLS, NAC, AAA, Authentication & Authorization Policies.
• Experience with Active Directory integration, Security Groups, and Identity Sources.
• Strong understanding of PKI and Certificate Management, including server certificates, CA chains, certificate renewals, thumbprints, and certificate-based authentication.
• Experience with Cisco ISE vulnerability remediation, security patching, and production support.
• Hands-on experience with packet captures, ISE logs, authentication troubleshooting, and root cause analysis.
• Experience integrating Cisco ISE with: 
  • Cisco Catalyst
  • Meraki
  • Firewalls
  • F5
  • DNS
  • Splunk/SIEM platforms

ServiceNow & Change Management

• Experience creating and managing ServiceNow Change Requests.
• Ability to write implementation, validation, rollback, and risk assessment plans.
• Experience executing: 
  • ISE upgrades and patching
  • Certificate renewals
  • DNS changes
  • Policy updates
  • Security group changes
  • New integrations
  • Infrastructure migrations

Incident & Support Experience

• Strong troubleshooting experience across: Endpoint → Switch/AP → ISE → Active Directory → Authorization Policy → Network Access
• Experience with major incidents, RCA, and Cisco TAC case management.
• Ability to diagnose authentication, authorization, certificate, and connectivity issues.

Infrastructure & Automation

• Experience with:  
  • Cisco ISE migrations and node deployments
  • High Availability (HA) environments
  • Splunk monitoring and alerting
  • ServiceNow integrations
• Preferred experience with: 
  • Python
  • Ansible
  • Terraform
  • REST APIs
  • CI/CD Automation

Preferred Qualifications

• CCNP Enterprise / CCNP Security or equivalent.
• Experience with Cisco Catalyst, Meraki, Enterprise Wireless, Active Directory, PKI, Splunk, and ServiceNow.
• Experience in highly regulated enterprise environments.