Security Engineer- Network Access Control (NAC)

We are seeking a Security Engineer Network Access Control (NAC) with 23 years of hands-on experience in Network Access Control network security authentication and endpoint access management.

The ideal candidate should have practical experience in configuring implementing monitoring and troubleshooting NAC solutions in enterprise network environments. The candidate will work closely with network security infrastructure and customer teams to ensure secure and controlled access to wired and wireless networks.

Experience with NAC platforms such as Cisco ISE Aruba ClearPass FortiNAC or Forescout will be preferred.

• Configure implement and maintain Network Access Control solutions.
  
• Manage network access policies for users endpoints devices and different network segments.
  
• Configure authentication and authorisation policies based on organisational requirements.
  
• Support secure access for corporate guest BYOD and IoT devices.
  
• Monitor NAC environments and ensure access policies are functioning as expected.
  
  

• Configure and troubleshoot 802.1X authentication for wired and wireless networks.
  
• Work with RADIUS TACACS LDAP and Active Directory authentication.
  
• Troubleshoot authentication failures and endpoint access issues.
  
• Work with certificates and authentication methods such as EAP-TLS.
  
• Support user and device-based authentication policies.
  

• Configure NAC policies profiles authentication rules authorisation rules and endpoint classifications.
  
• Perform endpoint profiling and device identification.
  
• Configure VLAN assignment and role-based access policies.
  
• Support NAC deployments across enterprise network environments.
  
• Assist with NAC upgrades migrations policy changes and implementation activities.
  

• Troubleshoot network access and authentication-related issues.
  
• Analyse NAC logs and identify the root cause of access failures.
  
• Troubleshoot VLAN DHCP DNS RADIUS and connectivity-related issues.
  
• Work with network switches wireless controllers firewalls and other network infrastructure.
  
• Coordinate with internal teams and customers to resolve technical issues.
  
  

• Implement network access policies based on security requirements.
  
• Support endpoint compliance and posture assessment.
  
• Identify unauthorised or non-compliant devices attempting to access the network.
  
• Assist in implementing segmentation and role-based network access.
  
• Support security monitoring and incident investigation related to network access
  
  

Integrate NAC solutions with:

• Active Directory
  
• RADIUS
  
• LDAP
  
• DHCP
  
• DNS
  
• Network Switches
  
• Wireless Controllers
  
• Firewalls
  
• SIEM / Security Monitoring Platforms
  
• Endpoint Security Platforms
  

7. Customer & Project Support

• Work with customers during NAC implementation and troubleshooting activities.
  
• Participate in deployment configuration testing and documentation.
  
• Understand customer requirements and translate them into NAC policies.
  
• Provide technical support during implementation and post-deployment activities.
  
• Coordinate with OEMs and technology partners when required.
  

8. Monitoring & Reporting

Monitor and report:

• Authentication failures
  
• Endpoint onboarding status
  
• Unauthorized devices
  
• NAC incidents
  
• Policy violations
  
• Endpoint profiling
  
• Network access issues
  
• System health and availability
  

Prepare technical reports and maintain appropriate NAC documentation.

9. Documentation

• Maintain NAC configuration documentation.
  
• Document network access policies and authentication flows.
  
• Prepare implementation and troubleshooting guides.
  
• Maintain network diagrams and configuration records.
  
• Ensure technical documentation is updated following changes or deployments.
  

10. Team Collaboration

• Coordinate with Network Security Server Cloud and IT Infrastructure teams.
  
• Work with OEM technical support teams when required.
  
• Support senior engineers and technical managers during complex NAC implementations.
  
• Participate in knowledge-sharing and technical training activities.
  

Strong understanding of Network Access Control (NAC).

Hands-on experience with at least one NAC platform:

Cisco ISE

Aruba ClearPass

FortiNAC

Forescout

Good understanding of 802.1X authentication.

Knowledge of RADIUS and TACACS.

Knowledge of Active Directory and LDAP.

Understanding of TCP/IP VLAN DHCP DNS switching and routing.

Knowledge of wired and wireless network authentication.

Experience in troubleshooting authentication and network access issues.

Understanding of endpoint profiling and device classification.

Basic understanding of network security concepts.

Good analytical and troubleshooting skills.

Excellent communication and coordination skills.

• 23 years of experience in NAC / Network Security / Network Engineering.
  
• Hands-on experience with Cisco ISE or Aruba ClearPass.
  
• Experience working with enterprise network environments.
  
• Experience with wired and wireless 802.1X implementation.
  
• Experience integrating NAC with Active Directory and RADIUS.
  
• Experience with endpoint profiling and posture assessment.
  
• Knowledge of Cisco switching and wireless infrastructure.
  
• Experience working in customer-facing implementation or support environments.
  
• Relevant networking or security certifications will be an added advantage.
  

Bachelors degree in Computer Science Information Technology Electronics Networking or a related field.