Network Access Control Engineer

OneAPPS Consulting; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

OneAPPS Consulting, a London-based technology consultancy, is seeking a Network Access Control Engineer to lead NAC deployments across wired and wireless networks.

Hybrid work model: 3 days per week from the London Canary Wharf office. The role focuses on Forescout and EyeSegment, 802.1x, automation with Ansible, and collaboration with cross-functional teams to ensure security and compliance.

Qualifications

• Experience in deployment and management of NAC solutions with Forescout and EyeSegment.
• 5+ years of applied experience with infrastructure disciplines and concepts.
• Network infrastructure engineering with NAC focus and enterprise implementation.
• Proficiency with Ansible for automation and with REST APIs.
• Familiarity with security best practices and regulatory compliance.
• Ability to review AI-assisted recommendations for resilience and security.

Responsibilities

• Lead NAC deployment and management focusing on Forescout and EyeSegment.
• Implement 802.1x across wired and wireless networks.
• Develop and maintain Ansible automation scripts and playbooks.
• Collaborate with network, security and operations teams.
• Monitor, troubleshoot, and optimize NAC systems for high availability.
• Conduct regular security assessments and audits of NAC controls.
• Document architecture, processes and procedures for NAC deployments.
• Mentor junior engineers in NAC best practices.
• Stay current with NAC trends and automation technologies.
• Provide daily operational support and implementation assistance.

Skills

NAC deployment

Forescout

EyeSegment

Ansible automation

802.1X

REST APIs

XML/JSON

VMware ESXi

Splunk SPL

Cross-functional leadership

Security audits

Cisco ISE

Aruba ClearPass

GRC tooling (Archer)

AI-assisted workflows

Education

Bachelors in computer engineering/CS

Tools

Forescout

EyeSegment

Cisco ISE

Aruba ClearPass

VMware ESXi

Job description

OneAPPS Consulting (www.oneapps.com) is a Technology consulting firm based out of London and offices across Europe. We are working on various projects involving diverse, multicultural teams with clients across the Europe. We are an invaluable partner and our teams have collaborated to support the growth of our clients. With more than 7 locations worldwide we help our clients to deliver their projects smoothly. We look forward to getting to know you and working with you.

Role: Network Access Control Engineer

Location: London - Canary Wharf

Work Model: Hybrid - 3 Days/Week from Office

Scope of Work

• Seeking an experienced NAC engineer to lead the deployment, and management of NAC solutions with a focus on Forescout and EyeSegment platforms.
• Implement and maintain 802.1x authentication across wired and wireless networks.
• Develop and maintain automation scripts and playbooks using Ansible to streamline NAC operations and network device configurations.
• Collaborate with network, security, and operations teams to integrate NAC with broader security and infrastructure initiatives.
• Monitor, troubleshoot, and optimize NAC systems to ensure high availability, performance, and compliance.
• Conduct regular security assessments and audits of network access controls and recommend improvements.
• Document architecture, processes, and procedures for NAC deployments and operations.
• Mentor and guide junior engineers in NAC best practices and technologies.
• Stay current with industry trends and emerging technologies in NAC, network security and automation.
• Daily operational support
• Implementation support activities

Skills & experience:

• Experience in deployment and management of NAC solutions with a focus on Forescout and EyeSegment platforms. Some design experience would be a plus.
• Formal training or certification in infrastructure disciplines/concepts, with 5+ years of applied experience
• Network infrastructure engineering experience, with a focus on Network Access Control (NAC)
• Expertise with Forescout and EyeSegment platforms (deployment, configuration, and management); experience with other NAC solutions (e.g., Cisco ISE, Aruba ClearPass) is a plus
• Risk/controls exposure and tooling familiarity (e.g., Archer or similar GRC platforms).
• Proficiency with automation tools - especially Ansible (developing playbooks and automating network/security tasks) - and experience working with XML, JSON, and REST APIs
• Familiarity with network security best practices and compliance requirements
• Excellent problem-solving, communication, and documentation skills; ability to work independently and lead cross-functional teams; experience with VMware ESXi infrastructure and Splunk Query Language (SPL)
• Demonstrated experience using enterprise-authorized AI capabilities to support infrastructure engineering workflows, with strong validation habits and awareness of data sensitivity
• Ability to review and validate AI-assisted recommendations before implementation; escape when uncertain; and ensure outcomes align with resiliency, security, and auditability expectations

Knowledge:

• Strong knowledge of 802.1X authentication protocols and enterprise implementation
• Solid understanding of network infrastructure fundamentals (switching, routing, VLANs, firewalls, wireless, etc.)

Qualifications:

• Bachelors in computer engineering/CS or industry equivalent experience
• Relevant certifications (network/security or risk fundamentals) and continuous learning in risk and resilience.