Security-Cleared Cisco Network Engineer: ISE & Wireless

Matchtech; Harlow; On-site; GBP 70,000 - 110,000; Full time

Job summary

Matchtech is seeking a Security Cleared Senior Network Engineer on a contract basis to support Cisco ISE and Catalyst 9800 wireless platforms across secure network access and policy enforcement. This hands-on role focuses on engineering, troubleshooting, and implementation for 802.1X, MAB, and RADIUS—ensuring stable, secure operation.

The role includes leading migration strategies, designing HA deployments, and delivering clear documentation while coordinating with vendors and stakeholders.

Qualifications

• Security clearance (SC) required or eligible.
• Strong TCP/IP & OSI fundamentals.
• Experience with 802.1X, MAB, and RADIUS workflows.

Responsibilities

• Lead design, build, and replacement of legacy wireless with Cisco Catalyst 9800 WLC architecture.
• Define end-to-end wireless migration strategies including cutovers.
• Architect HA 9800 WLC deployments with SSO and redundancy.
• Design enterprise wireless solutions: SSID segmentation, VLAN mapping, RF optimization.
• Oversee Cisco ISE design, upgrades, patching, HA topology improvements.
• Optimize ISE policies: authentication, authorization, profiling, posture.
• Enhance secure network access via 802.1X and MAB.
• Drive performance improvements across wireless and AAA infra.
• Troubleshoot authentication & connectivity; use packet capture tools.
• Support change and release activities per governance.
• Coordinate with vendors (e.g., Cisco TAC) when needed.
• Produce clear technical docs and runbooks.

Skills

Security clearance (SC)

TCP/IP knowledge

802.1X

MAB

RADIUS

Troubleshooting

Documentation

Stakeholder comms

Education

CCNP Enterprise

CCNP Security

Cisco ISE Specialist

CWNA / CWNP

Tools

Cisco ISE

Catalyst 9800

Wireshark

TCPdump

Cisco DNA Center

ForcePoint Firewall

Job description

Matchtech is seeking a Security Cleared Senior Network Engineer on a contract basis to support Cisco ISE and Catalyst 9800 wireless platforms across secure network access and policy enforcement. This hands-on role focuses on engineering, troubleshooting, and implementation for 802.1X, MAB, and RADIUS—ensuring stable, secure operation.

The role includes leading migration strategies, designing HA deployments, and delivering clear documentation while coordinating with vendors and stakeholders.