Lead Infrastructure Engineer-NAC

Job responsibilities

• Lead the design deployment and management of NAC solutions with a focus on Forescout and EyeSegment platforms.
• Implement and maintain 802.1x authentication across wired and wireless networks.
• Develop and maintain automation scripts and playbooks using Ansible to streamline NAC operations and network device configurations.
• Collaborate with network security and operations teams to integrate NAC with broader security and infrastructure initiatives.
• Monitor troubleshoot and optimize NAC systems to ensure high availability performance and compliance.
• Conduct regular security assessments and audits of network access controls and recommend improvements.
• Document architecture processes and procedures for NAC deployments and operations.
• Mentor and guide junior engineers in NAC best practices and technologies.
• Stay current with industry trends and emerging technologies in NAC network security and automation.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation validating outputs and handling operational data according to sensitivity and security requirements.
• Applies reuse-first AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options ensuring changes are traceable/auditable and aligned to resiliency and security expectations.

Required qualifications capabilities and skills

• Formal training or certification in infrastructure disciplines/concepts with 5 years of applied experience
• Relevant year of network infrastructure engineering experience with a focus on Network Access Control (NAC)
• Strong knowledge of 802.1X authentication protocols and enterprise implementation
• Proficiency with automation toolsespecially Ansible (developing playbooks and automating network/security tasks)and experience working with XML JSON and REST APIs
• Solid understanding of network infrastructure fundamentals (switching routing VLANs firewalls wireless etc.)
• Strong Linux administration skills (installation scripting troubleshooting)
• Familiarity with network security best practices and compliance requirements
• Excellent problem-solving communication and documentation skills; ability to work independently and lead cross-functional teams; experience with VMware ESXi infrastructure and Splunk Query Language (SPL)
• Demonstrated experience using enterprise-authorized AI capabilities to support infrastructure engineering workflows with strong validation habits and awareness of data sensitivity
• Ability to review and validate AI-assisted recommendations before implementation; escalate when uncertain; and ensure outcomes align with resiliency security and auditability expectations

• Bachelors in Computer Engineering/CS (or equivalent experience).
• Expertise with Forescout and EyeSegment platforms (deployment configuration and management); experience with other NAC solutions (e.g. Cisco ISE Aruba ClearPass) is a plus
• Risk/controls exposure and tooling familiarity (e.g. Archer or similar GRC platforms).
• Relevant certifications (network/security or risk fundamentals) and continuous learning in risk and resilience.