ISE Lead: Enterprise Access Control & C2C Expert

CACI

Washington (District of Columbia)

On-site

USD 104,000 - 218,000

Full time

14 days+

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

CA CI is seeking a Cisco Identity Services Engine (ISE) Lead to provide senior engineering, operations, and technical leadership for enterprise network access control. The candidate will lead policy development, testing, and sustainment of ISE policies enforcing C2C requirements across wired, remote-access, and device administration environments.

The ECS3 program supports our intelligence customer across CONUS and OCONUS with LAN, UC, and cybersecurity services.

Qualifications

Active TS/SCI clearance with ability to obtain CI Polygraph prior to start.
Current DoW 8140/8570-aligned IAT Level II certification, such as CompTIA Security+, or ability to obtain prior to start.
Current Cisco Certified Specialist – Security Identity Management Implementation credential.
10+ years of relevant information technology, network engineering, cybersecurity, or network-access-control experience.
5+ years of hands-on Cisco ISE engineering or administration experience.
Demonstrated experience designing, creating, testing, and sustaining Cisco ISE authentication and authorization policies.
Demonstrated experience with 802.1X, EAP-TLS, MAB, RADIUS, TACACS+, CoA, dynamic VLAN assignment, dACLs, SGTs, and enterprise network-access-control concepts.
Demonstrated experience integrating Cisco ISE with Active Directory, PKI/certificate services, switches, and endpoint-management or endpoint-security platforms.
Experience troubleshooting complex wired access-control issues across Cisco ISE, switches, endpoints, identity services, and certificate infrastructure.
Experience with Cisco ISE distributed deployments, including PAN, secondary Administration node, PSN, Monitoring, pxGrid, node registration, replication, backup/restore, and operational health monitoring.
Familiarity with ticketing systems, change-management processes, incident management, problem management, and customer-facing operational support.
Ability to work independently while collaborating effectively with network, security, endpoint, identity, and service-management teams.

Responsibilities

Lead ISE and C2C policy engineering: design, build, test, document, and sustain ISE policies and posture.
Implement enterprise access-control methods: 802.1X, EAP-TLS, MAB, RADIUS, TACACS+, guest and contractor access.
Develop C2C enforcement and remediation workflows: dynamic VLANs, downloadable ACLs, SGTs, CoA, and quarantine actions.
Lead ISE integrations: AD, PKI, switches, endpoint-management/security tools, SIEMs, pxGrid, VPNs, and other services.
Provide Tier 3 troubleshooting and incident support: diagnose authorization, certificates, posture, RADIUS, TACACS+, and network-device issues.
Maintain ISE platform health: manage PAN, PSNs, pxGrid, replication, backups, certificates, capacity, DR procedures.
Plan lifecycle activities: upgrades, patches, migrations, certifications, and change-control plans.
Establish technical standards and change controls: naming standards, baselines, test procedures, SOPs, and knowledge articles.
Lead C2C onboarding and operational improvement: site onboarding, phased rollout, and continuous improvement.
Provide technical leadership and escalation management: mentoring, escalation packages, root-cause analyses.