Senior Network Security Engineer: Cisco ISE & Zero Trust

Socket.dev; Suitland (MD); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health Insurance

Life Insurance

Paid Time Off

Disability Insurance

Retirement Plan

Learning and Development opportunities

Job summary

Agile Defense is seeking a Senior Network Security Engineer to lead Cisco ISE implementations and migration from ForeScout CounterACT. You will configure ISE across the environment, manage AAA services, and ensure 802.1X authentication for wired and wireless networks.

Key responsibilities include AD/LDAP integration, policy design, and high-availability ISE deployments on Cisco SNS 3715 appliances, while collaborating with security and operations teams to strengthen Zero Trust controls.

Qualifications

• Eight years of government experience with leadership.
• Experience implementing and troubleshooting Cisco ISE (RADIUS/TACACS+).
• Knowledge of 802.1X, device profiling, posture checks, and PKI.
• Experience with AD/LDAP integration for identity lookups and group policies.

Responsibilities

• Design, configure, monitor, and troubleshoot Cisco ISE as NAC/NAM.
• Migrate from ForeScout CounterACT to Cisco ISE and map policies.
• Integrate ISE with AD/LDAP and wireless controllers; ensure policy enforcement.
• Provide wireless support and basic troubleshooting with WLCs.
• Perform health checks, upgrades, migrations, and SOP documentation.
• Mentor junior staff and collaborate with engineering, operations, and compliance teams.

Skills

Cisco ISE

RADIUS/TACACS+

802.1X

Zero Trust

Policy design

Active Directory

Network security

PKI integration

Education

Bachelor's degree in IT/Cybersecurity or related field

Tools

ForeScout CounterACT

Cisco SNS 3715

Cisco ISE

Cisco 9800 WLCs

Active Directory/LDAP

Job description

Agile Defense is seeking a Senior Network Security Engineer to lead Cisco ISE implementations and migration from ForeScout CounterACT. You will configure ISE across the environment, manage AAA services, and ensure 802.1X authentication for wired and wireless networks.

Key responsibilities include AD/LDAP integration, policy design, and high-availability ISE deployments on Cisco SNS 3715 appliances, while collaborating with security and operations teams to strengthen Zero Trust controls.