Manager - Cloud & Security Customer Service Operations

Tata Communications; Pune District; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

Tata Communications is looking for a Cisco ISE SME with 8-15 years of experience to design, implement, and optimize Cisco ISE solutions. The candidate should have strong troubleshooting skills and the ability to provide L3 support for infrastructure.

You will be involved in integrating Cisco ISE with various security platforms and ensuring secure network access. Strong communication skills are essential for collaborating with stakeholders.

Qualifications

• 8-15 years of experience in Cisco technologies and network security.
• Strong troubleshooting and analytical skills.
• Excellent communication skills and experience leading technical discussions.

Responsibilities

• Design and deploy Cisco ISE solutions for enterprise environments.
• Implement wired, wireless, and VPN authentication using 802.1X.
• Provide L3 support for Cisco ISE infrastructure and troubleshoot issues.
• Integrate Cisco ISE with security platforms to enhance network access security.

Skills

Cisco ISE 2.x/3.x Administration and Troubleshooting

802.1X Authentication (EAP-TLS, PEAP, EAP-FAST)

TACACS+, RADIUS, AAA

TrustSec and SGT

Device Profiling and Posture Services

Guest and BYOD Services

TCP/IP, VLANs, Routing Switching

Wireless LAN Controllers (Cisco/Aruba)

VPN Technologies

DHCP, DNS, PKI Infrastructure

NAC Solutions

Zero Trust Architecture

Identity and Access Management (IAM)

Certificate Management

Automation using Python, REST APIs, Ansible

Job description

Job Title: Cisco ISE SME (Subject Matter Expert)

Experience: 8-15 Years Location: Pune Department: Network Security Infrastructure

Role Summary

We are seeking an experienced Cisco ISE SME to design, implement, support, and optimize Cisco Identity Services Engine (ISE) solutions across enterprise environments. The candidate will be responsible for Network Access Control (NAC), 802.1X authentication, device profiling, posture assessment, guest access, and integration with security platforms to ensure secure network access.

Key Responsibilities

Design Implementation

• Design and deploy Cisco ISE solutions for enterprise environments.
• Implement wired, wireless, and VPN authentication using 802.1X.
• Configure TACACS+ administration services for network device access control.
• Design and implement TrustSec, SGT (Security Group Tags), and micro-segmentation solutions.
• Configure guest access, BYOD onboarding, and posture assessment policies.
• Integrate Cisco ISE with Active Directory, LDAP, PKI, and Azure AD.

Operations Support

• Provide L3 support for Cisco ISE infrastructure.
• Troubleshoot authentication, authorization, and accounting (AAA) issues.
• Investigate endpoint profiling and posture compliance issues.
• Resolve certificate-related and EAP authentication problems.
• Perform upgrades, patches, backups, and disaster recovery activities.
• Conduct root cause analysis (RCA) for major incidents.

Security Integration

• Integrate Cisco ISE with:
  • Cisco DNA Center
  • Cisco Secure Firewall (FMC/FTD)
  • Cisco Secure Access
  • Cisco SecureX
  • Microsoft Active Directory
  • MDM solutions (Intune, MobileIron, Workspace ONE)
• Support Zero Trust and NAC initiatives.
• Implement compliance and security policies.

Monitoring Optimization

• Monitor ISE health, performance, and capacity.
• Optimize authentication workflows and policy sets.
• Review logs and reports for security incidents.
• Develop automation scripts where applicable.

Required Technical Skills

Cisco Technologies

• Cisco ISE 2.x/3.x Administration and Troubleshooting
• 802.1X Authentication (EAP-TLS, PEAP, EAP-FAST)
• TACACS+, RADIUS, AAA
• TrustSec and SGT
• Device Profiling and Posture Services
• Guest and BYOD Services

Networking

• TCP/IP, VLANs, Routing Switching
• Wireless LAN Controllers (Cisco/Aruba)
• VPN Technologies
• DHCP, DNS, PKI Infrastructure

Security

• NAC Solutions
• Zero Trust Architecture
• Identity and Access Management (IAM)
• Certificate Management

Preferred Skills

• Cisco Certified Specialist Security Identity Management Implementation
• CCNP Security
• Forescout NAC
• Experience with automation using Python, REST APIs, Ansible
• Knowledge of Cisco DNA Center and SDA (Software Defined Access)

Key Competencies

• Strong troubleshooting and analytical skills.
• Experience handling critical incidents and escalations.
• Ability to perform RCA and problem management.
• Excellent stakeholder communication skills.
• Ability to lead technical discussions with vendors and customers.