Senior Cisco Identity Services Engine (ISE) Engineer

Role: Senior Cisco Identity Services Engine (ISE) Engineer Location: Washington, DC (Onsite) Type: Full-Time Required Experience 10–15 years of Network/Security Engineering experience. Strong hands-on experience with Cisco ISE 3.x in large enterprise environments. Experience with Cisco ISE upgrades, patching, troubleshooting, administration, and multi-node deployments . Strong knowledge of 802.1X, RADIUS, EAP/EAP-TLS, NAC, AAA, Authentication & Authorization Policies . Experience with Active Directory integration, Security Groups, and Identity Sources . Strong understanding of PKI and Certificate Management , including server certificates, CA chains, certificate renewals, thumbprints, and certificate-based authentication. Experience with Cisco ISE vulnerability remediation, security patching, and production support . Hands-on experience with packet captures, ISE logs, authentication troubleshooting, and root cause analysis . Experience integrating Cisco ISE with: Cisco Catalyst Meraki Firewalls F5 DNS Splunk/SIEM platforms ServiceNow & Change Management Experience creating and managing ServiceNow Change Requests . Ability to write implementation, validation, rollback, and risk assessment plans. Experience executing: ISE upgrades and patching Certificate renewals DNS changes Policy updates Security group changes New integrations Infrastructure migrations Incident & Support Experience Strong troubleshooting experience across: Endpoint → Switch/AP → ISE → Active Directory → Authorization Policy → Network Access Experience with major incidents, RCA, and Cisco TAC case management. Ability to diagnose authentication, authorization, certificate, and connectivity issues. Infrastructure & Automation Experience with: Cisco ISE migrations and node deployments High Availability (HA) environments Splunk monitoring and alerting ServiceNow integrations Preferred experience with: Python Ansible Terraform REST APIs CI/CD Automation Preferred Qualifications CCNP Enterprise / CCNP Security or equivalent. Experience with Cisco Catalyst, Meraki, Enterprise Wireless, Active Directory, PKI, Splunk, and ServiceNow. Experience in highly regulated enterprise environments.