Lead Cisco ISE & NAC Security Engineer - Hybrid (4 onsite)

M&T Bank Corporation; United States; Híbrido; USD 120 000 - 160 000; Tempo integral

Resumo da oferta

M&T Bank is seeking a Security Engineer to implement and support Cisco ISE-based NAC across enterprise networks, including cloud, wired, and VPN access. You will design policies, enforce Zero Trust controls, and mentor junior engineers.

Work four days onsite in Wilmington, DE with one remote day per week, focusing on identity-driven access, posture validation, and secure segmentation of resources.

Qualificações

• Experience designing identity-driven NAC solutions for enterprise networks.
• Hands-on Cisco ISE deployment and policy management.
• Experience leading security projects in large environments.

Responsabilidades

• Implement Cisco ISE-based NAC to provide AAA across wired, wireless, VPN.
• Configure 802.1X, RADIUS, TACACS+, device profiling, posture, guest access.
• Develop RBAC, dynamic policies, and network segmentation strategies.
• Support testing, upgrades, and integration of ISE deployments.
• Manage ISE infrastructure, nodes, HA, certs, and identity sources.
• Integrate ISE with AD/LDAP, PKI, SIEM, and SOAR tools.
• Develop automation for provisioning, policy management, and onboarding.
• Analyze events to identify risks and optimize policies.
• Troubleshoot complex authentication and network access issues.
• Collaborate with Cisco, network, security, and identity teams.
• Assist leadership with licensing, roadmap, and lifecycle planning.
• Create standards and best practices for identity-driven access control.
• Mentor junior engineers and operations staff.

Conhecimentos

Mentoring

Policy development

Security architecture

Cross-functional collaboration

Ferramentas

Cisco ISE

Active Directory / LDAP

PKI

SIEM

TACACS+/RADIUS

TrustSec / SGTs

Descrição da oferta de emprego

M&T Bank is seeking a Security Engineer to implement and support Cisco ISE-based NAC across enterprise networks, including cloud, wired, and VPN access. You will design policies, enforce Zero Trust controls, and mentor junior engineers.

Work four days onsite in Wilmington, DE with one remote day per week, focusing on identity-driven access, posture validation, and secure segmentation of resources.