Network Engineer - Aruba ClearPass NAC

Tata Consultancy Services; Bengaluru; On-site; INR 3,000,000 - 4,200,000; Full time

Job summary

Tata Consultancy Services in Bengaluru is seeking an experienced L3 Network Engineer with deep Aruba ClearPass expertise to operate and evolve enterprise NAC services. The role covers authentication troubleshooting, policy design, onboarding, guest access, certificate services, and ITIL-aligned governance.

The successful candidate will mentor junior engineers, plan upgrades, and collaborate with IT teams to ensure high availability, security, and scalable policy enforcement across wired and

Qualifications

• 8-12+ years in networking or security infrastructure.
• 5+ years in NAC or identity-services.
• Proficient with Aruba ClearPass Policy Manager administration.
• Deep knowledge of 802.1X, RADIUS, TACACS+, EAP methods, PKI, and AD/LDAP.
• Experience with large-scale wired and wireless NAC environments.

Responsibilities

• Administer and troubleshoot Aruba ClearPass NAC clusters, nodes, services, policies, roles, enforcement profiles, and device definitions.
• Configure and troubleshoot 802.1X, MAC Authentication Bypass, RADIUS, TACACS+, EAP methods, certificates, and authorization flows.
• Manage endpoint profiling, posture, device categories, and role mapping for enforcement.
• Support ClearPass Guest, Onboard, OnGuard, captive portal, BYOD, sponsor workflows, and certificate lifecycles.
• Integrate ClearPass with AD, LDAP, PKI, MDM/UEM, SIEM, firewalls, wireless controllers, switches, and ITSM platforms.

Skills

NAC experience

Aruba ClearPass

Authentication troubleshooting

802.1X knowledge

Education

Bachelor degree or diploma in Engineering/CS/IT

Tools

ClearPass APIs

Python

Ansible

Active Directory

LDAP

Job description

Role Summary

We are looking for an experienced L3 Network Engineer with strong expertise in Aruba ClearPass Policy Manager to operate and enhance enterprise Network Access Control services. The role includes advanced authentication troubleshooting, policy design, profiling, onboarding, guest access, certificate services, integrations, upgrades, and technical leadership.

Key Responsibilities

Aruba ClearPass NAC - Primary

• Administer and troubleshoot Aruba ClearPass Policy Manager clusters, nodes, services, policies, roles, enforcement profiles, and network device definitions.
• Configure and troubleshoot 802.1X, MAC Authentication Bypass, RADIUS, TACACS+, EAP-TLS, PEAP, certificate-based authentication, and authorization flows.
• Manage endpoint profiling, posture, device categories, custom fingerprints, role mapping, segmentation, and access enforcement.
• Support ClearPass Guest, Onboard, OnGuard, captive portal, BYOD, sponsor workflows, and certificate lifecycle processes where deployed.
• Integrate ClearPass with Active Directory, LDAP, PKI, MDM/UEM, SIEM, firewalls, wireless controllers, switches, and ITSM platforms.
• Troubleshoot authentication failures using Access Tracker, event viewer, RADIUS attributes, endpoint data, certificates, packet captures, and device logs.
• Plan and execute upgrades, patches, cluster maintenance, backups, restores, migrations, certificate renewals, and disaster-recovery tests.
• Develop standards, reusable policy designs, APIs, automation, reporting, audit controls, and operational documentation.

Operations, Governance & Technical Leadership

• Own or support P1/P2 major incidents, participate in technical bridge calls, and provide timely stakeholder updates.
• Execute incident, service request, change, problem, and configuration management activities in line with ITIL practices.
• Prepare implementation plans, rollback procedures, risk assessments, validation reports, SOPs, and knowledge articles.
• Engage OEM support and technology vendors for complex defects, software issues, and product escalations.
• Monitor service health, capacity, availability, performance, and recurring trends; recommend continuous improvement actions.
• Mentor L1/L2 engineers, conduct technical reviews, and support transitions, audits, projects, and operational readiness.

Secondary Technical Requirements

Technology Area

Preferred Platforms

Expected Capability

Wireless

Aruba, Juniper Mist, Cisco

Troubleshoot WLAN authentication, role assignment, guest access, roaming, and controller or cloud integration.

LAN Switching

Aruba CX, Juniper EX, Cisco Catalyst

Support wired 802.1X, MAB, downloadable roles/ACLs, VLAN assignment, and switch-port behavior.

Identity / PKI

Active Directory, LDAP, CA, certificates

Troubleshoot directory lookup, group mapping, EAP certificates, trust chains, revocation, and renewal.

Security Integration

Palo Alto, firewalls, SIEM

Support context sharing, segmentation, security events, syslog, and enforcement integrations.

DDI

BlueCat, Infoblox, Microsoft

Understand DHCP, DNS, IP addressing, endpoint visibility, and profiling dependencies.

Automation

ClearPass APIs, Python, Ansible

Automate device onboarding, policy validation, reporting, backups, and operational workflows.

Required Qualifications & Experience

• 8-12+ years of networking or security infrastructure experience, including at least 5 years of NAC or identity-services experience.
• Strong hands‑on experience with Aruba ClearPass Policy Manager administration and complex authentication troubleshooting.
• Deep knowledge of 802.1X, RADIUS, TACACS+, EAP methods, certificates, PKI, Active Directory, LDAP, endpoint profiling, and authorization.
• Experience with large-scale wired and wireless NAC environments, high availability, upgrades, and security integrations.
• Working knowledge of routing, switching, wireless, firewalls, DHCP, DNS, APIs, automation, and ITIL processes.
• Bachelor degree or diploma in Engineering, Computer Science, Information Technology, Electronics, Telecommunications, or a related discipline.