Cisco ISE Engineer

### Position Overview The Cisco ISE Engineer supports the SEC ISS contract by designing and operating Cisco Identity Services Engine (ISE) capabilities that control secure access across SEC enterprise networks. This role implements and maintains AAA services, integrates ISE with Microsoft Active Directory and Microsoft Entra ID, and enforces policy-based access for wired and wireless environments. The position advances the PWS zero-trust direction by strengthening identity-centric controls, reducing legacy authentication exposure, and supporting compliance with federal cybersecurity requirements. ### Primary Responsibilities **ISE Solution Architecture and Deployment** - Design, implement, and administer Cisco ISE solutions to enforce network access control across SEC-managed enterprise environments. - Build and maintain ISE policy sets, authentication/authorization rules, and enforcement workflows for user and device onboarding. - Plan and execute ISE platform upgrades, patching, and optimization activities. - Coordinate ISE architecture and implementation activities with network engineering teams. **AAA and Identity Integration** - Configure and manage AAA services using RADIUS and TACACS+ for secure access to network infrastructure. - Integrate Cisco ISE with Microsoft Active Directory and Microsoft Entra ID (Azure AD) to support centralized identity lifecycle and access governance. - Implement 802.1X authentication methods and NAC controls for wired and wireless endpoint access. **Zero-Trust and Security Compliance Enforcement** - Translate zero-trust requirements into ISE enforcement policies for identity, device trust, and session-based access decisions. - Support implementation of SEC-directed control enforcement activities. - Maintain configuration documentation, SOP inputs, and control evidence to support FISMA-aligned audits. **Operations, Troubleshooting, and Service Delivery** - Troubleshoot complex authentication, authorization, and network access issues. - Monitor ISE health, logs, and policy outcomes; proactively identify trends and implement corrective actions. - Participate in incident response and escalation workflows. ### Required Qualifications - USA Citizenship required. - Clearance: Ability to obtain and maintain SEC Public Trust. - Education: Bachelors in a relevant field (e.g., Information Technology, Cybersecurity, Computer Science, Engineering). - 5-7 years of experience in network engineering and/or security roles in enterprise environments. - 3+ years of hands-on experience implementing and managing Cisco ISE in production environments. - Experience integrating identity and access controls with Microsoft Active Directory and Microsoft Entra (Azure AD). - Strong knowledge of network protocols (RADIUS, TACACS+, 802.1X/NAC).