"Alerted.org

Job Description

Insight Global is seeking a Top Secret Cisco Identity Services Engineer (ISE) based in Dahlgren, Virginia. This Engineer is responsible for designing, implementing, and maintaining secure network access solutions across classified and unclassified environments. This role requires a minimum of a high school diploma, an active Top Secret clearance, and IAT Level II certification. The ideal candidate will have 5–8 years of experience troubleshooting and configuring routing and switching infrastructure, monitoring ISE performance, and deploying new ISE software and hardware. Key responsibilities include creating and analyzing ISE regulations to ensure compliance with network security policies, managing network security through patching and device hardening, and supporting the development of Standard Operating Procedures (SOPs) for managed systems. The position demands expertise in 802.1X troubleshooting principles, PKI for EAP-TLS issues, and deploying 802.1X authentication across supplicant-enabled devices using AnyConnect and Network Access Manager (NAM) with EAP-MSCHAPv2/TLS encryption. Additional skills include handling Cisco Secure Client modules (VPN, Posture, DART), implementing MAC Authentication Bypass (MAB), configuring TACACS+ policies for secure device administration, and developing policies for unidentified network devices such as profiling, VLAN assignment, and DACL definition. The engineer will also ensure seamless integration of wired, wireless, and VPN infrastructure, perform data backups and restorations, assist with network accreditation processes, and act as a subject matter expert for troubleshooting and infrastructure support. The salary for this position ranges from $120,000-$140,000, based on experience.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [email protected] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• High school diploma

• IAT Level II Certification

• Top Secret Clearance

• 5-8 years' experience troubleshooting and configuring routing and switched infrastructure and monitoring ISE performance, along with installing and deploying new ISE software and hardware

• Experience creating and analyzing ISE regulations to ensure compliance with network security policies

• Experience with network security, such as patching and device hardening, along with managing file systems and installing software

• Experience supporting the development of Standard Operating Procedures (SOP) for managed systems

• Experience with 802.1x troubleshooting principles and with Public Key Infrastructure (PKI) to troubleshoot and maintain any 802.1x EAP-TLS problems.

• Experience deploying 802.1x authentication across supplicant-enabled devices using Network Access Manager (NAM) and AnyConnect software, utililizing EAP-MSCHAPv2/TLS encryption

• Experience handling Cisco Secure Client (or comparable tools) and a strong understanding of Cisco Secure Client Modules (including VPN, Posture, and DART)

• Experience with MAC Authentication Bypass (MAB)

• Experience directing network security management and firewall that align with company policies

• Experience developing policies for unidentified network devices across mixed networks, such as profiling devices, VLAN assignment to endpoints, and Downloadable Access Control Lists (DACL's) definition

• Experience standing as the subject matter expert for customers with troubleshooting and infrastructure support

• Experience helping with the accreditation process for the networks and managed systems, reviewing the daily logs, and conducting data backups and restorations

• Experience ensuring seamless integration across wired data, Virtual Private Network (VPN), and wireless infrastructure, along with client provisioning

• Experience configuring and deploying TACACS+ policies for secure network device administration