Network Engineer

Marks Sattin; Luton; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

Marks Sattin is seeking an experienced Network Access Control (NAC) engineer to enhance security and manage access control across multiple sites. You will lead the deployment of Cisco Identity Services Engine (ISE), implement policies, and troubleshoot complex access issues.

Applicants should have strong hands-on experience delivering Cisco ISE solutions and a preference for CCNP or equivalent experience. This role offers opportunities for both on-site and remote support.

Qualifications

• Experience delivering Cisco ISE 3.x implementations.
• Multi-site enterprise deployment experience.
• Strong hands-on experience with compliance and security policies.

Responsibilities

• Lead deployment and configuration of Cisco Identity Services Engine.
• Implement NAC policies including 802.1X and guest access.
• Troubleshoot complex access/authentication issues.

Skills

Cisco Identity Services Engine (ISE)

802.1X

MAB

Guest access workflows

Multi-site deployments

Troubleshooting authentication issues

Education

CCNP preferred or CCNA with Cisco ISE experience

Job description

Overview

A UK-based engineering organisation is seeking an experienced Network Access Control (NAC) engineer to deliver a single, unified NAC solution supporting two major business divisions. This programme will enhance security, standardise access control, and centralise policy management across multiple UK sites.

Responsibilities

• Lead the deployment, configuration, and implementation of Cisco Identity Services Engine (ISE) in enterprise environments.
• Implement NAC policies, including 802.1X, MAB, and guest access workflows.
• Integrate ISE with network infrastructure, including switching, wireless controllers, firewalls, Entrata ID, and Active Directory.
• Conduct testing and validation: functional testing, fail‑over testing, and meet agreed acceptance criteria.
• Troubleshoot complex access/authentication issues and provide early‑life support after go‑live.
• Configure guest access: captive portal, onboarding workflows, and sponsor portal configuration.
• Collaborate with security stakeholders to enforce compliance and security policy requirements.
• Produce and maintain technical documentation (design artefacts, diagrams, operational procedures).
• Provide a blend of on‑site and remote support during deployment and post‑implementation phases.
• Support incident response and root‑cause analysis for security/access events.
• Deliver knowledge transfer through workshops and training to internal IT teams.

Qualifications

• Pass a BPSS security check.
• Strong hands‑on experience delivering Cisco ISE 3.x (or later) implementations, including migration/transition of devices and services from prior NAC solutions.
• Multi‑site enterprise deployment experience, including high‑availability design and implementation.
• Experience with 802.1X for wired and wireless, MAC authentication bypass, and guest access with customisable workflows.
• Integration experience with existing Cisco estate and Microsoft services, including familiarity with Microsoft NPS.
• Strong operational capability in troubleshooting authentication, policy, certificate, and network‑access issues.

Certifications

• CCNP preferred (or CCNA with extensive Cisco ISE delivery experience).

Preferred

• Endpoint compliance/posture and profiling capabilities within ISE.
• Integrations with third‑party security tools (e.g., SIEM).