Senior Network Security Engineer: Cisco ISE NAC Migration

Tria Federal (Tria); Suitland (MD); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) retirement plan with 5% company

Paid time off and holidays

Parental & maternity leave

Tuition & certification reimbursement

Commuter benefits

Employee referral bonus

Job summary

Tria Federal is seeking a Senior Network Security Engineer to lead Cisco ISE deployments and migration from ForeScout CounterACT. The role requires strong security policy design, hands-on ISE configuration, and collaboration across security and network teams.

On-site work in the Washington, DC area with federal clients is expected. The ideal candidate has extensive experience with 802.1X, RADIUS/TACACS+, AD/LDAP integrations, PKI, and Zero Trust architectures.

Qualifications

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• 8+ years in a large government organization with 5+ years in technical leadership.
• Experience implementing and troubleshooting Cisco ISE in a NAC/NAM environment.
• Hands-on with 802.1X, RADIUS/TACACS+, and device administration.
• Experience migrating from ForeScout to Cisco ISE and embracing Zero Trust.
• Strong communication skills to explain concepts to technical and non-technical audiences.

Responsibilities

• Troubleshoot and resolve Cisco ISE issues across RADIUS, TACACS+, 802.1X, and endpoint authentication.
• Deploy and maintain Cisco ISE on two clustered SNS-3715 appliances.
• Support migration from ForeScout to ISE; map legacy policies to ISE policy sets.
• Configure ISE integrations with Cisco 9800 WLCs and guest portals.
• Work with AD/LDAP identity integrations and PKI with certificate-based authentication.
• Mentor junior staff and document changes.

Skills

Strong communication skills

Zero Trust concepts

Mentor junior staff

Education

Bachelor’s degree in Information Technology, Cybersecurity, or a related field

Tools

Cisco ISE

ForeScout CounterACT

Active Directory

LDAP

RADIUS

TACACS+

PKI

Cisco SNS-3715 appliances

Cisco 9800 WLC

Job description

Tria Federal is seeking a Senior Network Security Engineer to lead Cisco ISE deployments and migration from ForeScout CounterACT. The role requires strong security policy design, hands-on ISE configuration, and collaboration across security and network teams.

On-site work in the Washington, DC area with federal clients is expected. The ideal candidate has extensive experience with 802.1X, RADIUS/TACACS+, AD/LDAP integrations, PKI, and Zero Trust architectures.