Experience: Robust hands-on Cisco TrustSec / Cisco ISE experience
Requirement: Immediate need with longer-term visibility
Key Responsibilities & Required Skills
Hands-on experience in designing and implementing Cisco TrustSec microsegmentation across non-fabric (traditional LAN) environments using Cisco ISE.
Solid expertise in Security Group Tag (SGT) classification, propagation, and policy enforcement to enable identity-based access control.
Experience creating and managing SGACLs (Security Group Access Control Lists) and TrustSec policies for:
User-to-user communication
User-to-server communication
Experience configuring 802.1X, MAB, and RADIUS to support TrustSec-based access control frameworks.
Skilled in troubleshooting:
SGT propagation
Authorization policies
TrustSec enforcement
Catalyst switching environments
Proficient in integrating Cisco ISE with Armis.
Proven ability to implement Zero Trust and microsegmentation strategies to:
Enhance security
Reduce attack surface
Meet compliance requirements