Forscout / Cisco ISE NAC support

Athena Consultancy Services; Dadri; Hybrid; INR 900,000 - 1,300,000; Full time

Job summary

Athena Consultancy Services is seeking a skilled Network Access Control (NAC) Engineer with hands-on experience in Forescout and/or Cisco ISE to support enterprise NAC infrastructure. The role covers endpoint authentication, posture assessment, policy management, and security enforcement across wired and wireless networks.

Responsibilities include monitoring NAC environments, configuring 802.1X, RADIUS, and TACACS+, and coordinating with Network/Security teams.

Qualifications

• NAC concepts and enterprise network security knowledge.
• Hands-on with Forescout NAC / CounterACT and/or Cisco ISE.
• Knowledge of 802.1X, RADIUS, TACACS+ and endpoint authentication.
• Experience with wired and wireless NAC policy management.
• Familiarity with endpoint profiling, posture assessment, and compliance.

Responsibilities

• Manage and support Forescout NAC / CounterACT and/or Cisco ISE environments.
• Monitor NAC infrastructure, appliances, services, alarms and health.
• Configure and troubleshoot 802.1X, MAB, RADIUS, TACACS+ and endpoint authentication.
• Manage NAC policies for wired and wireless networks.
• Configure and troubleshoot endpoint profiling, posture assessment and compliance.
• Support dynamic VLAN, dACL, SGT and network segmentation.
• Troubleshoot onboarding, authentication failures, authorization issues and access restrictions.
• Assist integration with AD, DNS, DHCP, switches, wireless controllers, and firewalls.
• Coordinate with Network and Security teams and perform NAC upgrades and maintenance.
• Troubleshoot Policy Sets, Live Logs and authentication traces in Cisco ISE.
• Support guest access, BYOD and IoT onboarding where applicable.
• Maintain SOPs, documentation and incident records.

Skills

NAC concepts

Forescout NAC

Cisco ISE

802.1X

RADIUS

TACACS+

MAB

VLAN

DHCP/DNS

TCP/IP

Routing & Switching

SNMP/SSH

Active Directory

PKI

Logs/Packet captures

Tools

ServiceNow

Jira

Job description

Role: NAC Support Engineer Forescout / Cisco ISE
Experience: 38 Years
Level: L2/L3
Location: As per requirement

Job Summary:
We are looking for a skilled Network Access Control (NAC) Engineer with hands‑on experience in Forescout and/or Cisco ISE to support enterprise NAC infrastructure, endpoint authentication, access policies, posture assessment, and network security enforcement. The role involves monitoring, troubleshooting, configuration, policy management, incident resolution, and coordination with Network/Security teams.

Key Responsibilities

• Manage and support Forescout NAC / CounterACT and/or Cisco ISE environments.
• Monitor NAC infrastructure, appliances, services, alarms, and system health.
• Configure and troubleshoot 802.1X, MAB, RADIUS, TACACS+ and endpoint authentication.
• Manage NAC policies for wired and wireless networks.
• Configure and troubleshoot endpoint profiling, classification, posture assessment and compliance.
• Support dynamic VLAN, downloadable ACL (dACL), Security Group Tag (SGT) and network segmentation.
• Troubleshoot endpoint onboarding, authentication failures, authorization issues and access restrictions.
• Support integration with Active Directory, DNS, DHCP, switches, wireless controllers and firewalls.
• Work with Cisco switches/WLCs for NAC enforcement and access‑control troubleshooting.
• Configure and maintain Forescout policies, device groups, compliance rules and enforcement actions.
• Troubleshoot Cisco ISE Policy Sets, Authentication/Authorization policies and Live Logs.
• Support guest access, BYOD and IoT device onboarding, where applicable.
• Perform NAC upgrades, configuration changes, backups, health checks and maintenance activities.
• Analyze logs, authentication traces and network packets to identify root cause.
• Handle P1/P2 incidents, provide RCA and implement corrective actions.
• Support NAC migrations, new deployments and policy enhancements.
• Coordinate with Network, Security, Server, IAM and OEM teams.
• Maintain SOPs, technical documentation, incident records and knowledge‑base articles.

Required Technical Skills

• Strong knowledge of NAC concepts and enterprise network security.
• Hands‑on experience with Forescout NAC / CounterACT and/or Cisco ISE.
• Good knowledge of:
• 802.1X / EAP
• RADIUS / TACACS+
• MAB
• VLAN / dACL
• DHCP / DNS
• TCP/IP
• Routing & Switching
• SNMP / SSH
• Experience with Cisco switches and Wireless LAN Controllers.
• Knowledge of Active Directory and certificate‑based authentication/PKI.
• Good troubleshooting skills using logs, packet captures and authentication traces.
• Experience with ITSM tools such as ServiceNow/Jira.

Forescout environments commonly involve endpoint classification, compliance and enforcement, while Cisco ISE roles emphasize RADIUS/802.1X, policy enforcement and integrations. Forescout also supports Cisco ISE integration through pxGrid.