ISE Lead: Enterprise Network Access Architect (TS/SCI)

CACI International Inc.; Washington, Northern (District of Columbia, KY); Hybrid; USD 104,000 - 218,000; Full time

Job summary

CACI International Inc. is seeking a senior Cisco Identity Services Engine (ISE) Lead in Washington, DC. You will provide engineering leadership for enterprise network access control, translating access-control requirements into scalable ISE policy and operational capabilities.

The role emphasizes design, testing, and sustainment of ISE authentication/authorization policies, integration with AD/PKI, and collaboration with security and network teams to support CONUS/OCONUS operations.

Qualifications

• Active TS/SCI clearance with CI poly required.
• 10+ years of IT/network/cybersecurity or NAC experience.
• 5+ years hands-on Cisco ISE engineering/administration.
• Experience with 802.1X, EAP-TLS, MAB, RADIUS, TACACS+.
• Experience integrating ISE with AD, PKI/certificate services, switches.

Responsibilities

• Lead ISE and C2C policy engineering across enterprise environments.
• Design, test, implement, document, and sustain ISE policies.
• Develop C2C enforcement workflows and remediation actions.
• Provide Tier 3 troubleshooting for complex ISE issues.
• Maintain ISE platform health, upgrades, and lifecycle activities.
• Mentor teammates and coordinate with security/service teams.

Skills

ISE engineering

Policy engineering

802.1X

RADIUS

CoA

Python scripting

Troubleshooting

AD integration

Education

Bachelor's degree

Tools

Active Directory

PKI/Certificate Services

pxGrid

SIEMs

Cisco ISE

Job description

CACI International Inc. is seeking a senior Cisco Identity Services Engine (ISE) Lead in Washington, DC. You will provide engineering leadership for enterprise network access control, translating access-control requirements into scalable ISE policy and operational capabilities.

The role emphasizes design, testing, and sustainment of ISE authentication/authorization policies, integration with AD/PKI, and collaboration with security and network teams to support CONUS/OCONUS operations.