Cisco NAC Engineer

Job Summary This role involves planning, designing, and deploying Network Access Control (NAC) across wired networks using Cisco ISE NAC clusters and configuring 802.1X on campus access switches. The position includes building authentication and authorization policies tied to device profiling, leading phased rollouts with clear rollback plans, and onboarding and segmenting non-user devices such as IP phones, printers, cameras, IoT, and OT endpoints. Additionally, the role requires configuring, operating, and upgrading Cisco Nexus switches and managing routing and Layer 2 designs between data center and campus. Key Responsibilities Plan, design and deploy NAC across wired network using Cisco ISE NAC cluster and configure 802.1X on campus access switches Build authentication and authorization policies tied to device profiling Lead phased rollouts: monitor mode and closed (enforcement) mode, with clear rollback plans Onboard and segment non-user devices: IP phones, printers, cameras, IoT and OT endpoints Configure, operate and upgrade Nexus switches running NX-OS Qualifications & Requirements Bachelor’s degree in computer engineering, IT or a related field, or equivalent experience 5+ years in enterprise networking, with at least 2 years hands-on with NAC in a campus environment At least one completed NAC deployment taken to enforcement mode across multiple buildings or sites Strong working knowledge of Cisco ISE: policy sets, profiling, posture, guest, pxGrid and distributed deployments 3+ years hands-on with Cisco Nexus and NX-OS, including vPC, FEX and VRFs