19 Aug
|
Bits&BYTE
|
India
Role Summary
We are seeking a Security Engineer – Network Access Control (NAC) with 2–3 years of hands-on experience in Network Access Control, network security, authentication, and endpoint access management.
The ideal candidate should have practical experience in configuring, implementing, monitoring, and troubleshooting NAC solutions in enterprise network environments. The candidate will work closely with network, security, infrastructure, and customer teams to ensure secure and controlled access to wired and wireless networks.
Experience with NAC platforms such as Cisco ISE, Aruba Clear Pass, FortiNAC, or Forescout will be preferred.
Key Responsibilities
1. Network Access Control
- Configure, implement, and maintain Network Access Control solutions.
- Manage network access policies for users, endpoints, devices, and different network segments.
- Configure authentication and authorisation policies based on organisational requirements.
- Support secure access for corporate, guest, BYOD, and IoT devices.
- Monitor NAC environments and ensure access policies are functioning as expected.
2. 802.1X & Authentication
- Configure and troubleshoot 802.1X authentication for wired and wireless networks.
- Work with RADIUS, TACACS+, LDAP, and Active Directory authentication.
- Troubleshoot authentication failures and endpoint access issues.
- Work with certificates and authentication methods such as EAP-TLS.
- Support user and device-based authentication policies.
3. NAC Implementation & Configuration
- Configure NAC policies, profiles, authentication rules, authorisation rules, and endpoint classifications.
- Perform endpoint profiling and device identification.
- Configure VLAN assignment and role-based access policies.
- Support NAC deployments across enterprise network environments.
- Assist with NAC upgrades, migrations, policy changes, and implementation activities.
4. Network Troubleshooting
- Troubleshoot network access and authentication-related issues.
- Analyse NAC logs and identify the root cause of access failures.
- Troubleshoot VLAN, DHCP, DNS, RADIUS, and connectivity-related issues.
- Work with network switches, wireless controllers, firewalls, and other network infrastructure.
- Coordinate with internal teams and customers to resolve technical issues.
5. Network Security
- Implement network access policies based on security requirements.
- Support endpoint compliance and posture assessment.
- Identify unauthorised or non-compliant devices attempting to access the network.
- Assist in implementing segmentation and role-based network access.
- Support security monitoring and incident investigation related to network access
6. NAC Integration
Integrate NAC solutions with:
- Active Directory
- RADIUS
- LDAP
- DHCP
- DNS
- Network Switches
- Wireless Controllers
- Firewalls
- SIEM / Security Monitoring Platforms
- Endpoint Security Platforms
7. Customer & Project Support
- Work with customers during NAC implementation and troubleshooting activities.
- Participate in deployment, configuration, testing, and documentation.
- Understand customer requirements and translate them into NAC policies.
- Provide technical support during implementation and post-deployment activities.
- Coordinate with OEMs and technology partners when required.
8. Monitoring & Reporting
Monitor and report:
- Authentication failures
- Endpoint onboarding status
- Unauthorized devices
- NAC incidents
- Policy violations
- Endpoint profiling
- Network access issues
- System health and availability
Prepare technical reports and maintain appropriate NAC documentation.
9. Documentation
- Maintain NAC configuration documentation.
- Document network access policies and authentication flows.
- Prepare implementation and troubleshooting guides.
- Maintain network diagrams and configuration records.
- Ensure technical documentation is updated following changes or deployments.
10. Team Collaboration
- Coordinate with Network, Security, Server, Cloud, and IT Infrastructure teams.
- Work with OEM technical support teams when required.
- Support senior engineers and technical managers during complex NAC implementations.
- Participate in knowledge-sharing and technical training activities.
Required Skills
· Strong understanding of Network Access Control (NAC).
· Hands-on experience with at least one NAC platform:
· Cisco ISE
· Aruba Explicit Pass
· FortiNAC
· Forescout
· Good understanding of 802.1X authentication.
· Knowledge of RADIUS and TACACS+.
· Knowledge of Active Directory and LDAP.
· Understanding of TCP/IP, VLAN, DHCP, DNS, switching, and routing.
· Knowledge of wired and wireless network authentication.
· Experience in troubleshooting authentication and network access issues.
· Understanding of endpoint profiling and device classification.
· Basic understanding of network security concepts.
· Good analytical and troubleshooting skills.
· Excellent communication and coordination skills.
Preferred Experience
- 2–3 years of experience in NAC / Network Security / Network Engineering.
- Hands-on experience with Cisco ISE or Aruba Clear Pass.
- Experience working with enterprise network environments.
- Experience with wired and wireless 802.1X implementation.
- Experience integrating NAC with Active Directory and RADIUS.
- Experience with endpoint profiling and posture assessment.
- Knowledge of Cisco switching and wireless infrastructure.
- Experience working in customer-facing implementation or support environments.
- Relevant networking or security certifications will be an added advantage.
Key Deliverables
Deliverable
Expected Frequency
Purpose
NAC Monitoring
Daily
Ensure NAC availability and proper functioning
Authentication Troubleshooting
As Required
Resolve user/device access issues
NAC Policy Management
As Required
Maintain secure network access
Endpoint Profiling
As Required
Identify and classify network devices
NAC Configuration Documentation
As Required
Maintain accurate technical records
Incident Resolution
As Required
Resolve NAC and authentication incidents
Customer Support
As Required
Support NAC implementation and operations
NAC Health Report
Monthly / As Required
Monitor system performance and issues
Qualification
· Bachelor's degree in Computer Science, Information Technology, Electronics, Networking, or a related field.
·
📌 Security Engineer- Network Access Control (NAC) (India)
🏢 Bits&BYTE
📍 India