Senior Cisco ISE & NAC Engineer (Hybrid)

Bupa; Leeds; Hybrid; GBP 54,000 - 66,000; Full time

Benefits offered by this job

25 days holiday

Bupa health insurance as a benefit in 

Enhanced pension plan

Onsite gyms or local discounts

Online discounts

Job summary

Bupa in the UK is seeking a Senior Secure Access Engineer to design, implement and manage Cisco ISE and NAC services across wired, wireless and remote access environments.

You will develop and maintain authentication and policy frameworks, ensure security alignment with Zero Trust, lead testing and deployments, and collaborate with IT, security and product teams in a hybrid role with 2 in-office days per week.

Qualifications

• Proven experience designing, implementing and supporting Cisco ISE in a large enterprise.
• Strong NAC and Zero Trust knowledge with identity-based access management.
• Hands-on experience with RADIUS and TACACS+ and 802.1X across wired, wireless and remote access.
• Ability to design and maintain network segmentation policies and device profiling.

Responsibilities

• Design, implement, configure, and support Cisco ISE infrastructure and associated NAC services.
• Develop and maintain authentication, authorisation and accounting (AAA) services using RADIUS and TACACS+.
• Design, implement and manage 802.1X authentication solutions across wired, wireless and remote access environments.
• Create, maintain and optimise Cisco ISE policy sets, authorisation rules and posture policies.
• Implement and manage device profiling, posture assessment and compliance validation to ensure only authorised devices gain network access.
• Design and maintain network segmentation policies using VLANs, downloadable ACLs and SGTs.
• Support guest access services and onboarding workflows within Cisco ISE.
• Monitor health, performance, and lifecycle management of the Cisco ISE platform.
• Troubleshoot authentication and network access issues with cross-functional teams.
• Maintain documentation, runbooks and service artefacts for Cisco ISE services.
• Lead testing, validation and deployment activities for ISE enhancements and upgrades.
• Collaborate with product managers and engineers to deliver Cisco ISE roadmap initiatives.
• Translate network access requirements into scalable, secure policy models.
• Review emerging capabilities to enhance security and operational efficiency.

Skills

Cisco ISE

NAC

Zero Trust

RADIUS/TACACS+

802.1X

Policy management

PowerShell

Python

REST APIs

Documentation

Stakeholder management

Tools

Cisco ISE Administration

PowerShell

Python

REST APIs

Active Directory integration

Entra ID

PKI / Certificate Services

Duo

SIEM Platforms

MDM/UEM Platforms

Job description

Bupa in the UK is seeking a Senior Secure Access Engineer to design, implement and manage Cisco ISE and NAC services across wired, wireless and remote access environments.

You will develop and maintain authentication and policy frameworks, ensure security alignment with Zero Trust, lead testing and deployments, and collaborate with IT, security and product teams in a hybrid role with 2 in-office days per week.