Senior Cisco ISE Lead - Policy & Access Architect

THE BISON GROUP LLC; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

The Bison Group, LLC is seeking a senior ISE engineer in the Washington, DC area to lead policy engineering, C2C onboarding, and enterprise access-control initiatives. You will design, test, implement, and sustain Cisco ISE authentication and authorization policies and support integrations with AD, PKI, and network devices.

Responsibilities include Tier 3 troubleshooting, ISE health maintenance, upgrade planning, and collaboration with security, network, and service-management teams.

Qualifications

• Active TS/SCI clearance with CI Polygraph eligibility.
• IAT Level II cert (e.g., Security+) or equivalent and DoD-ready.
• CCNA and Cisco ISE certifications; experience with ISE deployments.
• Experience designing and sustaining Cisco ISE authentication/authorization policies.
• Familiarity with 802.1X, EAP‑TLS, MAB, RADIUS, TACACS+ and CoA concepts.
• Experience integrating ISE with AD, PKI, switches, and endpoint tools.

Responsibilities

• Lead ISE and C2C policy engineering and policy lifecycle.
• Implement enterprise access-control methods and posture policies.
• Develop C2C enforcement workflows and remediation actions.
• Lead ISE integrations with AD, PKI, and network devices.
• Provide Tier 3 troubleshooting for complex ISE issues.
• Maintain health of distributed ISE deployments and perform upgrades.

Skills

Cisco ISE

802.1X

EAP‑TLS

RADIUS

TACACS+

pxGrid

Active Directory

Policy engineering

Scripting (Python/PowerShell)

Education

High School/GED + 9 Yrs

Associates + 7 Yrs

Bachelors +5 Yrs

Masters +3 Yrs

PhD +1 Yrs

Tools

Python

REST APIs

Ansible

PowerShell

Job description

The Bison Group, LLC is seeking a senior ISE engineer in the Washington, DC area to lead policy engineering, C2C onboarding, and enterprise access-control initiatives. You will design, test, implement, and sustain Cisco ISE authentication and authorization policies and support integrations with AD, PKI, and network devices.

Responsibilities include Tier 3 troubleshooting, ISE health maintenance, upgrade planning, and collaboration with security, network, and service-management teams.