Location: India – Remote

Engagement: Independent Contractor
Duration: Approximately 10–14 weeks
Availability: Immediate or short notice

Working hours: India hours with regular overlap with the UK business day
About the engagement
We are seeking an experienced Cisco ISE and Identity Security Engineer for a remote enterprise project involving Cisco Secure Remote Access VPN, Microsoft Entra ID, Active Directory and certificate-based authentication.
The engineer will help move an existing Cisco ISE Remote Access VPN integration from a permissive/pass-through configuration to controlled identity- and group-based access enforcement.
Key responsibilities
Review the existing Cisco ISE and Remote Access VPN architecture.
Assess the existing ISE policy sets, authorization profiles and RADIUS authentication flow.
Integrate Cisco ISE with Microsoft Entra ID and/or Active Directory.
Configure Entra REST ID Store and Microsoft Graph-based group lookups where applicable.
Design and configure group-based VPN authorization policies.




Map approximately 5–10 Entra ID/AD groups to 3–5 VPN access profiles.
Configure Cisco ASA or FTD/FMC Remote Access VPN integration with ISE.

Review user and device certificate authentication, PKI trust chains, SAN/UPN mapping and certificate profiles.
Configure protection against Active Directory account lockouts caused by repeated authentication failures.
Develop HLD, LLD, authorization matrix, test plan and rollback procedure.
Perform functional, negative, failover and security testing.
Support a controlled pilot, monitoring period and phased production rollout.
Troubleshoot authentication, authorization, RADIUS, certificate and group-mapping issues.
Produce as-built documentation, an operational runbook and knowledge-transfer material.
Work within formal enterprise change-control and security-approval processes.
Essential experience
Solid hands-on experience with Cisco Identity Services Engine.
Experience designing and implementing Cisco ISE polic

📌 Cisco ISE and Identity Security Engineer (Varanasi)
🏢 ServQual - Security
📍 Varanasi