Senior Network Access Security Engineer - Zero Trust

Rockwell Automation, Inc.; Eden Prairie (MN); Hybrid; USD 119,000 - 179,000; Full time

Benefits offered by this job

Health Insurance

401k

Paid Time off

Parental and Caregiver Leave

Flexible Work Schedule

Job summary

Rockwell Automation, Inc. is seeking a Senior Network Engineer to own design, security, and reliability of global network access.

You will work with 802.1X, MAB, ISE, and Forescout across AMER, EMEA, and APAC regions, partnering to advance Zero Trust in a large distributed enterprise. The role requires hands-on NAC policy work, strong troubleshooting, and the ability to own a regional share of the program while collaborating with security operations and network teams.

Qualifications

• Bachelor's degree required; US work authorization is mandatory.
• Minimum eight years of related experience preferred.
• Cisco certifications (CCNP/CCNP Security) or equivalent certification desirable.
• Extensive Forescout expertise with NAC policy design and enforcement.
• Strong 802.1X, MAB, RADIUS, and EAP experience essential.
• Experience deploying Cisco ISE in large distributed environments.

Responsibilities

• Design, deploy, and operate 802.1X and MAB for global access.
• Manage Cisco ISE deployment, upgrades, and certificates estate.
• Operate Forescout for device visibility and policy enforcement.
• Design network segmentation and Zero Trust controls.
• Manage RADIUS/TACACS+ and collaborate with security teams.
• Create runbooks, perform change management, and support off-hours.

Skills

802.1X

MAB

RADIUS

Troubleshooting

Zero Trust

Education

Bachelor's Degree in CS/Engineering/IT

Tools

Forescout

Cisco ISE

Palo Alto

Python

Ansible

REST APIs

Azure

WLC 9800

Job description

Rockwell Automation, Inc. is seeking a Senior Network Engineer to own design, security, and reliability of global network access.

You will work with 802.1X, MAB, ISE, and Forescout across AMER, EMEA, and APAC regions, partnering to advance Zero Trust in a large distributed enterprise. The role requires hands-on NAC policy work, strong troubleshooting, and the ability to own a regional share of the program while collaborating with security operations and network teams.