Role: NAC Support Engineer Forescout / Cisco ISE
Experience: 38 Years
Level: L2/L3
Location: As per requirement

Job Summary:
We are looking for a skilled Network Access Control (NAC) Engineer with hands-on experience in Forescout and/or Cisco ISE to support enterprise NAC infrastructure, endpoint authentication, access policies, posture assessment, and network security enforcement. The role involves monitoring, troubleshooting, configuration, policy management, incident resolution, and coordination with Network/Security teams.

Key Responsibilities

- Manage and support Forescout NAC / CounterACT and/or Cisco ISE environments.
- Monitor NAC infrastructure, appliances, services, alarms, and system health.
- Configure and troubleshoot 802.1X, MAB, RADIUS, TACACS+ and endpoint authentication.
- Manage NAC policies for wired and wireless networks.
- Configure and troubleshoot endpoint profiling, classification, posture assessment and compliance.
- Support dynamic VLAN, downloadable ACL (dACL), Security Group Tag (SGT) and network segmentation.
- Troubleshoot endpoint onboarding, authentication failures, authorization issues and access restrictions.
- Support integration with Active Directory, DNS, DHCP, switches, wireless controllers and firewalls.
- Work with Cisco switches/WLCs for NAC enforcement and access-control troubleshooting.
- Configure and maintain Forescout policies, device groups, compliance rules and enforcement actions.
- Troubleshoot Cisco ISE Policy Sets,



Authentication/Authorization policies and Live Logs.
- Support guest access, BYOD and IoT device onboarding, where applicable.
- Perform NAC upgrades, configuration changes, backups, health checks and maintenance activities.
- Analyze logs, authentication traces and network packets to identify root cause.
- Handle P1/P2 incidents, provide RCA and implement corrective actions.
- Support NAC migrations, new deployments and policy enhancements.
- Coordinate with Network, Security, Server, IAM and OEM teams.
- Maintain SOPs, technical documentation, incident records and knowledge-base articles.

Required Technical Skills

- Strong knowledge of NAC concepts and enterprise network security.
- Hands-on experience with Forescout NAC / CounterACT and/or Cisco ISE.
- Good knowledge of:
- 802.1X / EAP
- RADIUS / TACACS+
- MAB
- VLAN / dACL
- DHCP / DNS
- TCP/IP
- Routing & Switching
- SNMP / SSH

- Experience with Cisco switches and Wireless LAN Controllers.
- Knowledge of Active Directory and certificate-based authentication/PKI.
- Valuable troubleshooting skills using logs, packet captures and authentication traces.
- Experience with ITSM tools such as ServiceNow/Jira.

Forescout environments commonly involve endpoint classification, compliance and enforcement, while Cisco ISE roles emphasize RADIUS/802.1X, policy enforcement and integrations. Forescout also supports Cisco ISE integration through pxGrid.

📌 Forscout / Cisco ISE NAC support (Noida)
🏢 Athena Consultancy Services
📍 Noida