Senior Network Security Engineer - ISE & Zero Trust

Konnect IT Group, Inc.; Chicago (IL); On-site; USD 68,880 - 96,432; Full time

Job summary

Konnect IT Group, Inc. seeks a Senior Network Security Engineer with deep Cisco ISE expertise to design, implement, and operate NAC and TrustSec-based segmentation across wired, wireless, and data center environments.

The ideal candidate will lead on-site engagements in the Chicago metro area, deploying ISE platforms, enforcing identity-based access policies, and advancing ZTNA initiatives while collaborating with network and security teams to minimize risk and enforce least-privilege access.

Qualifications

• 3+ years of hands-on experience with Cisco ISE deployments.
• Proficient in 802.1X, MAB, and PEAP/EAP-TLS authentication.
• Experience with Guest/BYOD workflows and posture assessment.
• Experience with pxGrid integrations and TACACS+ device administration.
• Strong understanding of TrustSec, SGTs and SGACL policies.
• Knowledge of L2/L3 networking fundamentals, routing (OSPF, BGP).
• Familiarity with monitoring and troubleshooting ISE logs, captures, and debugging tools.

Responsibilities

• Design, deploy, and operate Cisco ISE environments for NAC and policy enforcement.
• Develop profiling, posture assessment, and guest/BYOD workflows.
• Implement 802.1X and MAB authentication across wired and wireless networks.
• Integrate ISE with Active Directory, PKI, and MDM; support pxGrid integrations.
• Lead microsegmentation architectures using TrustSec and enforce segmentation across switches and controllers.
• Troubleshoot using ISE live logs, packet captures, and device debugging tools.
• Travel to multiple Chicago sites for onsite deployments and support.

Skills

Cisco ISE

802.1X / MAB

Policy & profiling

pxGrid integrations

TACACS+ administration

TrustSec segmentation

L2/L3 networking

OSPF / BGP

NAT / QoS / STP / WLAN

ZTNA concepts

Job description

Konnect IT Group, Inc. seeks a Senior Network Security Engineer with deep Cisco ISE expertise to design, implement, and operate NAC and TrustSec-based segmentation across wired, wireless, and data center environments.

The ideal candidate will lead on-site engagements in the Chicago metro area, deploying ISE platforms, enforcing identity-based access policies, and advancing ZTNA initiatives while collaborating with network and security teams to minimize risk and enforce least-privilege access.