30 Aug
|
CGvak Software Exports
|
Bengaluru
30 Aug
CGvak Software Exports
Bengaluru
Roles & Responsibilities
Key Responsibilities NAC Design & Architecture • Design and implement scalable, highly available NAC solutions across campus, branch, data centre, and remote-access environments. • Develop NAC architecture standards, policy frameworks, HLD/LLD design documents, and deployment runbooks. • Lead identity-driven access and dynamic segmentation initiatives aligned with Zero Trust Network Access (ZTNA) principles. • Define authentication, authorization, and enforcement models for wired (802.1X/MAB), wireless, and VPN access. 1 ClearPass / ISE Expertise (Core) • Deep hands-on expertise in at least one platform: ◦ Aruba ClearPass – Policy Manager, OnGuard (posture), OnBoard (BYOD / certificate provisioning), Guest, and Insight. ◦ Cisco ISE – policy sets, profiling, posture, TrustSec/SGT, pxGrid, and Adaptive Network Control (ANC). • Build and tune service/policy logic, enforcement profiles, and role-mapping for complex multi-site environments. • Manage platform upgrades, clustering/redundancy, certificate lifecycle, and licensing. Authentication,
Authorization & Policy • Implement 802.1X (EAP-TLS, PEAP, EAP-TTLS), MAC Authentication Bypass (MAB), and web/captive-portal authentication. • Configure and operate RADIUS and TACACS+ for network access and device administration (AAA). • Design role-based access using energetic VLAN assignment, downloadable ACLs (dACLs), and security group tags (SGT/role). • Integrate with identity stores: Active Directory, LDAP, Azure AD / Entra ID, and certificate authorities (PKI). Profiling, Posture & Endpoint Compliance • Implement device profiling and fingerprinting to classify managed, unmanaged, and IoT/OT endpoints. • Configure posture / compliance assessment and remediation workflows for endpoint health. • Integrate with MDM/UEM (Intune, Jamf, Workspace ONE) and EDR/AV for compliance signals. Guest, BYOD & Device Onboarding • Design and operate guest access, sponsor approval, and self-registration portals. • Implem
📌 NAC Security Engineer (Bengaluru)
🏢 CGvak Software Exports
📍 Bengaluru