Senior Network Security Engineer — ISE & Zero Trust

KonnectIT; Chicago (IL); On-site; USD 68,880 - 96,432; Full time

Job summary

KonnectIT is seeking a Senior Network Security Engineer with deep Cisco ISE expertise to design, deploy, and operate enterprise NAC and TrustSec-based segmentation across wired, wireless, and data center environments. The role emphasizes identity-driven policy enforcement and strong troubleshooting across ISE platforms.

Applicants must reside within commuting distance of Chicago and be able to work onsite at client locations.

Qualifications

• 3+ years of hands-on experience deploying and operating Cisco ISE.
• Strong expertise in ISE policy sets, profiling, posture assessment, and guest/BYOD workflows.
• Deep knowledge of 802.1X, MAB, EAP methods, and network segmentation with TrustSec.

Responsibilities

• Design, deploy, and operate Cisco ISE environments supporting enterprise NAC and identity-based policy enforcement.
• Develop and manage ISE policy sets, profiling policies, posture assessment, and guest/BYOD workflows.
• Implement and maintain 802.1X and MAB authentication across wired and wireless environments.
• Integrate ISE with Active Directory, PKI infrastructures, certificate-based authentication, and MDM platforms.
• Configure and maintain TACACS+ device administration for network access control.
• Support pxGrid integrations to enable identity and context sharing across security platforms.
• Design and implement TrustSec segmentation architectures using SGTs and SGACL policies.
• Enable identity-to-role mapping and enforce segmentation across Catalyst switches, Nexus platforms, and wireless controllers.
• Lead the design and implementation of microsegmentation strategies across campus and data center environments.
• Perform advanced troubleshooting using ISE live logs, session directory, packet captures, and switch/WLC debugging tools.
• Collaborate to implement Zero Trust principles, minimizing lateral movement and enforcing least-privilege access.
• Manage network security changes through structured implementation plans, pilot deployments, and staged rollouts.
• Develop testing procedures and rollback strategies to ensure stable production operations.
• Travel to multiple sites within Chicago and work onsite to support deployments and troubleshooting.

Skills

Cisco ISE

ISE Policy Sets

Profiling

Posture Assessment

Guest BYOD workflows

pxGrid

TACACS+ device administration

802.1X

MAB

EAP PEAP

EAP-TLS

Active Directory

PKI

MDM

TrustSec

SGT

SGACL

Campus segmentation

Data center segmentation

Troubleshooting

L2/L3 networking

OSPF

BGP

ACLs

QoS

NAT

WLAN

WLC

Job description

KonnectIT is seeking a Senior Network Security Engineer with deep Cisco ISE expertise to design, deploy, and operate enterprise NAC and TrustSec-based segmentation across wired, wireless, and data center environments. The role emphasizes identity-driven policy enforcement and strong troubleshooting across ISE platforms.

Applicants must reside within commuting distance of Chicago and be able to work onsite at client locations.