Introduction:

We are seeking a skilled and experienced German Speaking- Cisco ISE Engineer with advanced knowledge of Cisco Identity Services Engine (ISE) and a strong background in network security. As a Cisco ISE Engineer, you will be responsible for deploying, configuring, maintaining, and troubleshooting Cisco ISE solutions for network access control (NAC), secure network segmentation, and policy enforcement across enterprise environments.

The ideal candidate will possess a CCNP or CCIE certification with hands-on experience in deploying and managing Cisco ISE solutions in complex networks. The role requires a deep understanding of network security, authentication protocols, and integration with various network infrastructure components.

Key Responsibilities:

• Design & Deployment:

  • Design, configure, and deploy Cisco ISE solutions for network access control (NAC), guest access, and 802.1X authentication.
  • Work with stakeholders to develop and implement Cisco ISE-based policies for device management, security posture assessment, and policy enforcement.
  • Configure and implement network security protocols (eg, RADIUS, TACACS+, 802.1X, VPN, etc.) in Cisco ISE.

• Configuration & Integration:

  • Integrate Cisco ISE with other Cisco solutions (eg, Cisco DNA Centre, Cisco ASA, Cisco Firepower) and third-party technologies (eg, Active Directory, LDAP, SAML).
  • Ensure integration with network infrastructure devices, including Switches, Routers, wireless controllers, Firewalls, and VPN gateways.
  • Configure and manage identity stores, authentication policies, authorization profiles, and network access policies.

• Troubleshooting & Maintenance:

  • Monitor and troubleshoot Cisco ISE systems to ensure reliability and optimal performance.
  • Perform root cause analysis of network issues, and provide solutions for Cisco ISE-related problems.
  • Regularly update and patch Cisco ISE deployments to ensure system security and functionality.

• Security & Compliance:

  • Work with security teams to ensure compliance with industry standards and regulations (eg, PCI-DSS, HIPAA).
  • Implement security policies and guidelines for user authentication, device profiling, and access control.

• Documentation & Reporting:

  • Maintain up-to-date documentation for all Cisco ISE configurations and integrations.
  • Prepare and deliver regular reports on the status of Cisco ISE systems, security posture, and policy enforcement.

• Collaboration:

  • Work closely with network engineers, security teams, and system administrators to ensure seamless integration and operation of Cisco ISE in the network environment.
  • Provide mentorship and guidance to junior team members regarding Cisco ISE best practices and troubleshooting.

Required Qualifications:

• Certifications:

  • CCNP Security or CCIE Security (preferred).
  • Cisco Certified Network Associate (CCNA) and/or Cisco Certified Network Professional (CCNP) certifications in relevant areas are highly desirable.
  • Cisco ISE-specific certifications (eg, Cisco ISE Deployment Specialist) are a plus.

• Experience:

  • Minimum 3-5 years of hands-on experience with Cisco ISE deployments and troubleshooting.
  • Strong experience with network access control (NAC), 802.1X authentication, and RADIUS/TACACS+ protocols.
  • Proven experience in integrating Cisco ISE with various Cisco products and third-party solutions (eg, Active Directory, LDAP, VPNs).
  • Solid understanding of security best practices, network segmentation, and policy enforcement.

• Technical Skills:

  • Expertise in configuring and managing Cisco ISE (all versions, including recent releases).
  • Experience with Cisco Identity Services Engine policies, profiling, and device management.
  • Knowledge of network protocols such as RADIUS, TACACS+, 802.1X, and 802.1AE (MACsec).
  • Experience with networking equipment (Cisco Switches, Routers, wireless LAN controllers).
  • Proficiency in troubleshooting tools and techniques (eg, packet capture, syslog, SNMP).

• Security Knowledge:

  • Strong understanding of network security concepts and methodologies, including multi-factor authentication, endpoint security, and VPN technologies.
  • Familiarity with industry regulations and security frameworks (eg, NIST, ISO 27001, PCI-DSS).

• Soft Skills:

  • Excellent problem-solving and analytical skills.
  • Strong communication skills, both verbal and written, with the ability to explain technical concepts to non-technical stakeholders.
  • Ability to work independently and as part of a collaborative team.