Network Engineer

Tata Consultancy Services; Santiago de Querétaro; Híbrido; MXN 420.000 - 600.000; Jornada completa

Descripción de la vacante

Tata Consultancy Services in Querétaro is seeking an experienced Network Access Control engineer to design and manage NAC policies, deploy authentication systems, and support zero-trust security.

The role requires CPPM expertise, knowledge of 802.1X/RADIUS, and collaboration with IT teams to ensure secure access, monitoring, and documented configurations.

Formación

• Advanced knowledge of English.
• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3+ years of experience in network engineering with an operations focus.
• Familiarity with network monitoring and analytics tools.

Responsabilidades

• Design and manage NAC policies to secure network access.
• Deploy and maintain authentication systems, focusing on Aruba ClearPass.
• Respond to security incidents and ensure system resilience.
• Monitor, analyze, and optimize NAC solutions for performance.
• Collaborate with IT and security teams to integrate NAC with other tools.
• Create and maintain documentation of NAC configurations and procedures.

Conocimientos

Advanced English

3+ years network engineering

Network security concepts

Zero Trust security principles

Authentication & Authorization

Educación

Bachelor's degree in Computer Science or IT

Herramientas

ClearPass Policy Manager (CPPM)

Aruba ESP

SIEM

Aruba APIs

Descripción del empleo

Tata Consultancy Services is an equal opportunity employer, our commitment to diversity & inclusion drives our efforts to provide equal opportunity to all candidates who meet our required knowledge & competency needs, irrespective of any socio-economic background, race, color, national origin, religion, sex, gender identity/expression, age, marital status, disability, sexual orientation or any others. We encourage anyone interested to build a career in TCS to participate in our recruitment & selection process.

TCS is seeking skilled professionals to join our team as a Network Access Control.

Responsibilities:

• Design and Manage Network Access Control Policies: Develop and enforce comprehensive NAC policies to ensure the security and integrity of our network.
• Deploy and Maintain Authentication Systems: Implement and manage network authentication systems, with a focus on Aruba ClearPass, to support micro-segmentation and zero-trust architectures.
• Incident Response: Act as a key responder to network security incidents, ensuring the effectiveness and resilience of our access control systems.
• System Monitoring and Optimization: Continuously monitor, analyze, and optimize our NAC solutions to ensure they are performing effectively and meeting security requirements.
• Collaboration: Work closely with other IT and security teams to integrate NAC solutions with other security tools and to ensure a cohesive security strategy.
• Documentation: Create and maintain detailed documentation of NAC configurations, policies, and procedures.

Technical/Functional Skills:

• ClearPass Policy Manager (CPPM): In-depth knowledge of ClearPass for network access control (NAC), authentication, authorization and accounting (AAA). This is critical for Zero Trust security.
• Network Security Principles: Strong understanding of security best practices, including firewalls, intrusion detection/prevention systems (IDS/IPS), VPNs and security auditing.
• Zero Trust Security: Knowledge of Zero Trust principles and how to implement them using Aruba ClearPass and other security tools. This includes micro‑segmentation and continuous authentication.
• Authentication & Authorization: Expertise in configuring and managing authentication protocols (e.g., 802.1X, RADIUS, TACACS+) and authorization policies.
• Security Compliance: Familiarity with relevant security compliance standards (e.g., GDPR, HIPAA, PCI DSS) and how to configure Aruba ESP to meet those standards.
• Threat Detection & Response: Skills in identifying and responding to security threats, including malware, phishing attacks, and denial‑of‑service attacks. Integration with SIEM (Security Information and Event Management) systems is often important.
• Automation & Scripting: It would be beneficial a proficiency in scripting/IaC languages for automating network configuration, monitoring, and troubleshooting tasks, including interaction with Aruba APIs

Qualifications:

• Advanced knowledge of English
• Bachelor's degree in Computer Science, Information Technology, or a related field.
• 3 + years of experience in network engineering, with a focus on operations.
• Familiarity with network monitoring and analytics tools.

Work modality: On site or Hybrid

Candidate must be located in or willing to relocate to Querétaro. it will be requested to attend office at least 3 days per week.