Experience: Strong hands-on Cisco TrustSec / Cisco ISE experience
Requirement: Immediate need with longer-term visibility
Key Responsibilities & Required Skills
- Hands-on experience in designing and implementing Cisco TrustSec microsegmentation across non-fabric (traditional LAN) environments using Cisco ISE.
- Solid expertise in Security Group Tag (SGT) classification, propagation, and policy enforcement to enable identity-based access control.
- Experience creating and managing SGACLs (Security Group Access Control Lists) and TrustSec policies for:
- User-to-user communication
- User-to-server communication
- Experience configuring 802.1X, MAB, and RADIUS to support TrustSec-based access control frameworks.
- Skilled in troubleshooting:
- SGT propagation
- Authorization policies
- TrustSec enforcement
- Catalyst switching environments
- Proficient in integrating Cisco ISE with Armis.
- Proven ability to implement Zero Trust and microsegmentation strategies to:
- Enhance security
- Reduce attack surface
- Meet compliance requirements