Senior Identity & Network Security Architect

Socket.dev; Dallas (TX); On-site; USD 150,000 - 190,000; Full time

Job summary

EOS IT Solutions is seeking a Principal Architect to lead identity-based access control and segmentation initiatives across enterprise networks, focusing on Cisco ISE, Catalyst Center, and TrustSec.

You will drive architecture standards, IaC automation, and governance, partnering with security, infrastructure, and operations to deliver secure, scalable solutions. This senior role requires deep Cisco expertise and hands-on lifecycle management across large environments.

Qualifications

• Extensive experience designing, implementing, and supporting Cisco ISE solutions within large-scale enterprise environments.
• Strong experience integrating Cisco ISE with Cisco Catalyst Center and associated network infrastructure platforms.
• Deep knowledge of Cisco TrustSec architecture, Security Group Tags (SGTs), Security Group Access Control Lists (SGACLs), and policy-based segmentation strategies.
• Experience with REST APIs, automation frameworks, and Infrastructure as Code methodologies.

Responsibilities

• Lead the architecture, design, deployment, and ongoing enhancement of Cisco Identity Services Engine (ISE) solutions across enterprise environments.
• Provide engineering and operational support for Cisco ISE platforms, including troubleshooting complex authentication, authorization, and policy enforcement issues.
• Design, configure, test, and support integrations between Cisco ISE and Cisco Catalyst Center to enable centralized policy orchestration and automated network access control.
• Collaborate with infrastructure, security, and operations teams to ensure secure and scalable deployment of identity-based networking solutions.
• Develop high-level and low-level designs that align with enterprise architecture standards, security objectives, and operational requirements.
• Support platform lifecycle management activities, including software upgrades, patching strategies, feature evaluations, and technology roadmap planning.
• Lead the design and implementation of Cisco TrustSec-based segmentation architectures.
• Define and develop Security Group Tags (SGTs), Security Group Access Control Lists (SGACLs), and policy-based segmentation frameworks across campus, data center, and hybrid environments.
• Evaluate and validate TrustSec policy models to ensure compliance with security, regulatory, and business requirements.
• Support deployment activities including testing, migration planning, implementation, and post-deployment optimization.
• Partner with security architecture and governance teams to establish standards and best practices for identity-based segmentation and Zero Trust initiatives.
• Conduct impact assessments and architectural reviews for new segmentation use cases and enterprise network changes.
• Develop IaC workflows and automation for policy deployment, configuration management, and operational reporting.
• Drive adoption of Infrastructure as Code (IaC) methodologies to improve consistency, scalability, and operational efficiency.
• Support automation initiatives utilizing technologies such as Python, REST APIs, Ansible, Git repositories, CI/CD processes, and related automation frameworks.
• Identify opportunities to reduce manual operational activities through orchestration and automation.

Skills

Cisco ISE

Cisco Catalyst Center

Cisco TrustSec

Identity-based access control

Zero Trust

REST APIs

Infrastructure as Code

Python

Ansible

Git

Education

Cisco CCIE/CCDE or equivalent certification

Tools

Ansible

Git

Job description

EOS IT Solutions is seeking a Principal Architect to lead identity-based access control and segmentation initiatives across enterprise networks, focusing on Cisco ISE, Catalyst Center, and TrustSec.

You will drive architecture standards, IaC automation, and governance, partnering with security, infrastructure, and operations to deliver secure, scalable solutions. This senior role requires deep Cisco expertise and hands-on lifecycle management across large environments.