NAC Security Engineer

TalentXO · India

Hiring for a Client - Airowire

Key Responsibilities

• Design and implement scalable NAC solutions across campus, branch, data centre and remote-access environments.
• Develop NAC architecture standards, policy frameworks, HLD/LLD documents and deployment runbooks.
• Drive identity-based access, dynamic segmentation and Zero Trust access initiatives.
• Design authentication and enforcement models for wired 802.1X/MAB , wireless and VPN environments.
• Provide deep hands-on expertise in Aruba ClearPass or Cisco ISE , including policy, profiling, posture, guest/BYOD and platform administration.
• Build and optimize policy logic, enforcement profiles, role mapping, clustering, upgrades, certificates and licensing.
• Implement EAP-TLS, PEAP, EAP-TTLS, MAB, RADIUS and TACACS+ authentication.
• Design role-based access using dynamic VLANs, dACLs and SGT/role-based enforcement .
• Integrate NAC with AD, LDAP, Entra ID/Azure AD, PKI, MDM/UEM, EDR/AV and security ecosystems.
• Implement endpoint profiling, posture assessment, compliance and segmentation for managed, unmanaged and IoT/OT devices.
• Design and manage guest access, BYOD onboarding, captive portals and certificate-based provisioning.
• Integrate NAC with firewalls, SIEM/SOAR, ITSM and threat-intelligence platforms using APIs, pxGrid and syslog.
• Provide L3 support for RADIUS/802.1X failures, certificate issues and policy mis-hits.
• Perform NAC health checks, capacity planning, performance tuning and troubleshooting.
• Maintain NAC architecture, policy matrices, configurations, SOPs and audit documentation.
• Exposure to Forescout, FortiNAC, Portnox or Arista Agni is an added advantage.

Ideal Candidate

Mandatory

1. 3+ years of network/security engineering experience with strong NAC and identity-based access expertise.
2. Deep hands-on expertise in Aruba ClearPass or Cisco ISE .
3. Strong L3 troubleshooting experience covering RADIUS, 802.1X, certificates and NAC policy issues .
4. Experience with policy design, enforcement profiles, role mapping, clustering, upgrades, certificates and licensing.
5. Strong knowledge of 802.1X, EAP-TLS/PEAP/EAP-TTLS, MAB, RADIUS and TACACS+ .
6. Experience with dynamic VLANs, dACLs, SGT/role-based access and dynamic segmentation .
7. Hands-on experience integrating AD, LDAP, Entra ID/Azure AD and PKI .
8. Experience with device profiling, posture assessment and IoT/OT endpoint segmentation .
9. Strong networking fundamentals across TCP/IP, VLANs, wired/wireless networks and Zero Trust principles .
10. Bachelor's degree in Computer Science, IT or a related field .

Preferred

• Aruba ACCP / ACMP / ACDP
• Cisco CCNP Security / SISE / CCIE Security
• CISSP
• Python/REST API scripting for NAC automation
• Exposure to cloud-native/agentless NAC platforms such as Forescout, Portnox, FortiNAC or Arista Agni