8-12+ years of networking or security infrastructure experience, including at least 5 years of NAC or identity-services experience.Robust hands-on experience with Aruba ClearPass Policy Manager administration and complex authentication troubleshooting.Deep knowledge of 802.1X, RADIUS, TACACS+, EAP methods, certificates, PKI, Active Directory, LDAP, endpoint profiling, and authorization.Experience with large-scale wired and wireless NAC environments, high availability, upgrades, and security integrations.Working knowledge of routing, switching, wireless, firewalls, DHCP, DNS, APIs, automation, and ITIL processes.

Responsibilities Aruba ClearPass NAC - PrimaryAdminister and troubleshoot Aruba ClearPass Policy Manager clusters, nodes, services, policies, roles, enforcement profiles, and network device definitions.Configure and troubleshoot 802.1X, MAC Authentication Bypass, RADIUS, TACACS+, EAP-TLS, PEAP, certificate-based authentication, and authorization flows.Manage endpoint profiling, posture, device categories, custom fingerprints, role mapping, segmentation, and access enforcement.Support ClearPass Guest, Onboard, OnGuard, captive portal, BYOD, sponsor workflows, and certificate lifecycle processes where deployed.Integrate ClearPass with Active Directory, LDAP, PKI, MDM/UEM, SIEM, firewalls, wireless controllers, switches, and ITSM platforms.Troubleshoot authentication failures using Access Tracker, event viewer, RADIUS attributes, endpoint data, certificates, packet captures, and device logs.Plan and execute upgrades, patches, cluster maintenance, backups, restores, migrations, certificate renewals, and disaster-recovery tests.Develop standards, reusable policy designs, APIs, automation, reporting,



audit controls, and operational documentation.Operations, Governance & Technical LeadershipOwn or support P1/P2 major incidents, participate in technical bridge calls, and provide timely stakeholder updates.Execute incident, service request, change, problem, and configuration management activities in line with ITIL practices.Prepare implementation plans, rollback procedures, risk assessments, validation reports, SOPs, and knowledge articles.Engage OEM support and technology vendors for complex defects, software issues, and product escalations.Monitor service health, capacity, availability, performance, and recurring trends; recommend continuous improvement actions.Mentor L1/L2 engineers, conduct technical reviews, and support transitions, audits, projects, and operational readiness.

QualificationsTechnology AreaPreferred PlatformsExpected Capability

WirelessAruba, Juniper Mist, CiscoTroubleshoot WLAN authentication, role assignment, guest access, roaming, and controller or cloud integration.LAN SwitchingAruba CX, Juniper EX, Cisco CatalystSupport wired 802.1X, MAB, downloadable roles/ACLs, VLAN assignment, and switch-port behavior.Identity / PKIActive Directory, LDAP, CA, certificatesTroubleshoot directory lookup, group mapping, EAP certificates, trust chains, revocation, and renewal.Security IntegrationPalo Alto, firewalls, SIEMSupport context sharing, segmentation, security events, syslog, and enforcement integrations.DDIBlueCat, Infoblox, MicrosoftUnderstand DHCP, DNS, IP addressing, endpoint visibility, and profiling dependencies.AutomationClearPass APIs, Python, AnsibleAutomate device onboarding, policy validation, reporting, backups, and operational workflows.

📌 Network Engineer - Aruba ClearPass NAC (Mumbai)
🏢 TCS
📍 Mumbai