Location: India – Remote
Engagement: Independent Contractor
Duration: Approximately 10–14 weeks
Availability: Immediate or short notice
Working hours: India hours with regular overlap with the UK business day
About the engagement
We are seeking an experienced Cisco ISE and Identity Security Engineer for a remote enterprise project involving Cisco Secure Remote Access VPN, Microsoft Entra ID, Active Directory and certificate-based authentication.
The engineer will help move an existing Cisco ISE Remote Access VPN integration from a permissive/pass-through configuration to controlled identity- and group-based access enforcement.
Key responsibilities
Review the existing Cisco ISE and Remote Access VPN architecture.
Assess the existing ISE policy sets,



authorization profiles and RADIUS authentication flow.
Integrate Cisco ISE with Microsoft Entra ID and/or Active Directory.
Configure Entra REST ID Store and Microsoft Graph-based group lookups where applicable.
Design and configure group-based VPN authorization policies.
Map approximately 5–10 Entra ID/AD groups to 3–5 VPN access profiles.
Configure Cisco ASA or FTD/FMC Remote Access VPN integration with ISE.
Review user and device certificate authentication, PKI trust chains, SAN/UPN mapping and certificate profiles.
Configure protection against Active Directory

📌 Cisco ISE and Identity Security Engineer (Bunghmun)
🏢 ServQual - Security
📍 Bunghmun