Assistant Manager - Cloud & Security Operations

Tata Communications; Pune District; On-site; INR 2,000,000 - 4,000,000; Full time

Job summary

Tata Communications is seeking an experienced Cisco ISE SME to design, implement, support, and optimize Cisco Identity Services Engine solutions across enterprise environments.

You will handle NAC, 802.1X authentication, device profiling, posture assessment, guest access, and integration with security platforms ensuring secure network access.

Qualifications

• Experience designing and deploying Cisco ISE in enterprise environments.
• Strong knowledge of NAC, posture assessment, and guest access.
• Ability to integrate ISE with AD/LDAP, PKI and cloud identity services.

Responsibilities

• Design and deploy Cisco ISE solutions for enterprise environments.
• Provide L3 support and troubleshoot AAA issues.
• Monitor health, performance, and capacity of ISE deployments.
• Implement TrustSec, SGTs, posture policies, and guest BYOD workflows.
• Integrate ISE with identity platforms like AD/LDAP and MS Azure.

Skills

ISE Administration

802.1X

TACACS+/RADIUS

TrustSec/SGT

Device Profiling

Guest BYOD

L3 Support

Troubleshooting

Automation (Python/REST)

Job description

Role Summary

We are seeking an experienced Cisco ISE SME to design, implement, support, and optimize Cisco Identity Services Engine (ISE) solutions across enterprise environments. The candidate will be responsible for Network Access Control (NAC), 802.1X authentication, device profiling, posture assessment, guest access, and integration with security platforms to ensure secure network access.

Key Responsibilities

Design & Implementation

• Design and deploy Cisco ISE solutions for enterprise environments.
• Implement wired, wireless, and VPN authentication using 802.1X.
• Configure TACACS+ administration services for network device access control.
• Design and implement TrustSec, SGT (Security Group Tags), and micro-segmentation solutions.
• Configure guest access, BYOD onboarding, and posture assessment policies.
• Integrate Cisco ISE with Active Directory, LDAP, PKI, and Azure AD.

Operations & Support

• Provide L3 support for Cisco ISE infrastructure.
• Troubleshoot authentication, authorization, and accounting (AAA) issues.
• Investigate endpoint profiling and posture compliance issues.
• Resolve certificate-related and EAP authentication problems.
• Perform upgrades, patches, backups, and disaster recovery activities.
• Conduct root cause analysis (RCA) for major incidents.

Security & Integration

• Integrate Cisco ISE with:
  • Cisco DNA Center
  • Cisco Secure Firewall (FMC/FTD)
  • Cisco Secure Access
  • Cisco SecureX
  • Microsoft Active Directory
  • MDM solutions (Intune, MobileIron, Workspace ONE)
• Support Zero Trust and NAC initiatives.
• Implement compliance and security policies.

Monitoring & Optimization

• Monitor ISE health, performance, and capacity.
• Optimize authentication workflows and policy sets.
• Review logs and reports for security incidents.
• Develop automation scripts where applicable.

Required Technical Skills

Cisco Technologies

• Cisco ISE 2.x/3.x Administration and Troubleshooting
• 802.1X Authentication (EAP-TLS, PEAP, EAP-FAST)
• TACACS+, RADIUS, AAA
• TrustSec and SGT
• Device Profiling and Posture Services
• Guest and BYOD Services

Networking

• TCP/IP, VLANs, Routing & Switching
• Wireless LAN Controllers (Cisco/Aruba)
• VPN Technologies
• DHCP, DNS, PKI Infrastructure

Security

• NAC Solutions
• Zero Trust Architecture
• Identity and Access Management (IAM)
• Certificate Management

Preferred Skills

• Cisco Certified Specialist Security Identity Management Implementation
• CCNP Security
• CCIE Security (Preferred)
• Experience with automation using Python, REST APIs, Ansible
• Knowledge of Cisco DNA Center and SDA (Software Defined Access)

Key Competencies

• Strong troubleshooting and analytical skills.
• Experience handling critical incidents and escalations.
• Ability to perform RCA and problem management.
• Excellent stakeholder communication skills.
• Ability to lead technical discussions with vendors and customers.

Working Hours:

• All days working from office
• Ready for Flexible support.