Hybrid Cisco ISE & NAC Security Lead

M&T Bank Corporation; Wilmington (DE); Híbrido; USD 128 000 - 214 000; Tempo integral

Resumo da oferta

M&T Bank in Wilmington, DE, seeks an experienced cybersecurity engineer to implement and support enterprise Cisco Identity Services Engine (ISE) solutions. You will enhance authentication, device visibility, and network segmentation across wired, wireless, VPN, and cloud environments while mentoring junior engineers.

You will collaborate with Cybersecurity, Network Engineering, and Identity teams on Zero Trust initiatives, TLS/PKI integration, and policy automation.

Qualificações

• Bachelor's degree and a minimum of 5 years’ relevant work experience, or a combined minimum of 9 years’ higher education and/or work experience.
• Advanced understanding of security system development, lifecycle, and architecture.
• Proven ability to translate architecture into technical requirements and design secure solutions.

Responsabilidades

• Implement Cisco ISE-based NAC solutions for enterprise-wide authentication, authorization, and accounting (AAA).
• Configure and maintain Cisco ISE policies including 802.1X, RADIUS, TACACS+, device profiling, posture assessment, and BYOD onboarding.
• Develop and maintain role-based access controls and dynamic authorization policies; support Zero Trust strategies.
• Manage deployment, high-availability, certificates, and identity sources; integrate with AD/LDAP/PKI and SIEM.

Conhecimentos

Leadership

Communication

Analytical thinking

Problem solving

Formação académica

Bachelor's degree or equivalent experience

Ferramentas

Cisco ISE

RADIUS

TACACS+

Security Groups (SGTs)

Descrição da oferta de emprego

M&T Bank in Wilmington, DE, seeks an experienced cybersecurity engineer to implement and support enterprise Cisco Identity Services Engine (ISE) solutions. You will enhance authentication, device visibility, and network segmentation across wired, wireless, VPN, and cloud environments while mentoring junior engineers.

You will collaborate with Cybersecurity, Network Engineering, and Identity teams on Zero Trust initiatives, TLS/PKI integration, and policy automation.