NAC Engineer

TEKsystems; Sheffield; On-site; GBP 65,000 - 90,000; Full time

Job summary

TEKsystems in Sheffield, UK is seeking a senior Network Security Engineer to design and implement Cisco ISE-based NAC solutions within a global transformation programme.

You will migrate existing NAC capabilities, define target-state architecture, and provide SME guidance on network access control, authentication and identity-based security, collaborating with Cyber Security, Infrastructure, Risk and Business stakeholders.

Qualifications

• 7+ years' experience in Enterprise Networking / Network Security.
• Strong hands-on experience with Cisco ISE.
• Experience with NAC (Network Access Control), 802.1X, RADIUS/TACACS+, EAP-TLS.
• Experience with network segmentation and authentication/identity-based access controls.
• CCNP/CCIE certification is preferred.
• Python automation and scripting.
• Linux/Unix administration.
• Enterprise routing and switching expertise.

Responsibilities

• Design, implement and support Cisco ISE solutions across a large enterprise environment.
• Support the migration of existing NAC capabilities into strategic Cisco ISE platforms.
• Review current security controls and define target-state architecture.
• Provide SME guidance on network access control, authentication and identity-based security.
• Work with Cyber Security, Infrastructure, Risk and Business stakeholders.
• Support global security standards, governance and compliance requirements.

Skills

Enterprise networking

Cisco ISE

NAC

802.1X

RADIUS/TACACS+

EAP-TLS

Network segmentation

Identity-based access

Python scripting

Linux/Unix administration

Enterprise routing & switching

Education

Cisco CCNP/CCIE

Tools

Forescout NAC

ClearPass

Cisco ISE

Job description

Network Security Engineer

We are seeking a senior Network Security Engineer with strong Cisco ISE and Network Access Control (NAC) expertise to support a global transformation programme, including the migration and evolution of existing access control capabilities towards Cisco ISE-based solutions.

Key Responsibilities

• Design, implement and support Cisco ISE solutions across a large enterprise environment.
• Support the migration of existing NAC capabilities into strategic Cisco ISE platforms.
• Review current security controls and define target-state architecture.
• Provide SME guidance on network access control, authentication and identity-based security.
• Work with Cyber Security, Infrastructure, Risk and Business stakeholders.
• Support global security standards, governance and compliance requirements.

Essential Skills

• 7+ years' experience in Enterprise Networking / Network Security.
• Strong hands-on experience with Cisco ISE.
• experience with:
  • NAC (Network Access Control)
  • 802.1X
  • RADIUS / TACACS+
  • EAP-TLS
  • Network segmentation
  • Authentication and identity-based access controls
• Cisco CCNP / CCIE preferred.
• Python automation and scripting.
• Linux / Unix administration.
• Enterprise routing and switching expertise.

Desirable

• Exposure to Forescout, Aruba ClearPass or other NAC platforms.
• IAM / Identity & Access Management.
• CISSP.
• VMware / OpenShift.
• AI / MLOps / LLMOps.

Ideal Candidate

A senior Network Security SME with hands-on experience delivering Cisco ISE-based NAC solutions, ideally including migrations from legacy NAC technologies such as Forescout or ClearPass, within a large regulated enterprise environment.

Location

Sheffield, UK