About the Role :

We are looking for a Senior NAC Engineer with robust expertise in Aruba ClearPass or Cisco ISE, identity-based access, 802.1X, endpoint profiling, and Zero Trust security.

Key Responsibilities :

- Design and implement scalable NAC solutions across campus, branch, data center, and remote-access environments.
- Develop NAC architecture, policy frameworks, HLD/LLD documents, and deployment runbooks.
- Configure and manage Aruba ClearPass or Cisco ISE, including policy, profiling, posture, guest, BYOD, and integrations.
- Implement 802.1X, EAP-TLS, PEAP, EAP-TTLS, MAB, RADIUS, and TACACS+.
- Build role-based access using dynamic VLANs, dACLs, SGT/roles, and dynamic segmentation.
- Integrate NAC with Active Directory, LDAP, Entra ID/Azure AD, PKI, and certificate authorities.
- Implement endpoint profiling, posture assessment, compliance, and remediation for managed, unmanaged, and IoT/OT devices.
- Design Guest, BYOD, and certificate-based onboarding solutions.
- Integrate NAC with firewalls, SIEM/SOAR, ITSM, MDM/UEM, and security platforms.
- Provide L3 support for RADIUS/802.1X failures, certificate issues, authentication problems, and policy mis-hits.
- Perform NAC health checks, capacity planning, performance tuning, upgrades, and high-availability management.
- Maintain NAC policies, configurations, documentation, SOPs,



and security compliance.

Mandatory Requirements :

- 3+ years of Network/Security Engineering experience with strong NAC expertise.
- Deep hands-on experience with Aruba ClearPass or Cisco ISE.
- Strong experience with NAC policy/service configuration, enforcement profiles, and role mapping.
- Experience managing NAC upgrades, clustering, redundancy, certificates, and licensing.
- Strong knowledge of 802.1X, EAP-TLS, PEAP, EAP-TTLS, MAB, RADIUS, and TACACS+.
- Experience with dynamic VLANs, dACLs, SGT/roles, and identity-based access.
- Experience integrating NAC with AD, LDAP, Entra ID/Azure AD, and PKI.
- Hands-on experience with device profiling, posture/compliance, and IoT/OT segmentation.
- Strong TCP/IP, VLAN, wired/wireless networking, and Zero Trust fundamentals.
- Proven L3 troubleshooting experience for complex NAC environments.
- Bachelor's degree in Computer Science, IT, or a related field.

Preferred :

- Certifications : Aruba ClearPass certifications, CCNP Security, Cisco SISE, CCIE Security, CISSP.
- Experience with Forescout, Portnox, FortiNAC, or Arista Agni.
- Knowledge of Python, REST APIs, and NAC automation.
- Experience with MDM/UEM, EDR/AV, SIEM/SOAR, and security integrations.

📌 Senior NAC Security Engineer (India)
🏢 TalentXO
📍 India