Cisco ISE

Job#: 2068446

Job Description:

CISCO IDENTITY SERVICES ENGINEER (RDTE)

SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Secret level.

Apex is seeking a Cisco Identity Services Engineer (ISE) Administrator to provide Design and Engineering Operation and Maintenance support for ISE systems on the classified and unclassified Research, Development, Test and Evaluation (RDTE) networks at Dahlgren, VA. As an Cisco ISE Administrator, you will identify endpoints, and enable the creation and enforcement of security and access policies for endpoint devices connected to the company's routers and switches, in order to simplify identity management across diverse devices and applications. If youre interested, please email .

Responsibilities

• Configure, implement, and troubleshoot ISE.
• Build and analyze ISE rules to comply with client network security policies.
• Create policies for unseen network devices in a mixed environment, to include profiling devices, defining Downloadable Access Control Lists (DACL's), and assigning Virtual Local Area Network (VLAN) to endpoints.
• Implement 802.1x solutions to all "supplicant-enabled" devices via AnyConnect software and Network Access Manager (NAM) profiles using EAP-MSCHAPv2/TLS encryption methods.
• Integrate with wired data, wireless infrastructure, and Virtual Private Network (VPN), as well as posture and client provisioning.
• Configure and implement TACACS policies for network device administration.
• Manage firewall and network security systems by establishing and enforcing approved policies
• Analyze network security requirements and implement perimeter security changes
• Serve as a subject matter expert in coordinating and troubleshooting with customers, other infrastructure support activities and business units
• Develop network documentation of security infrastructure
• Monitor network performance and implement performance tuning as necessary
• Responsible for installing software, applying patches, managing file systems, and monitoring performance of ISE systems
• Performs data backups and restoration of managed systems
• Assist in the certification and accreditation process for managed systems and networks
• Install and deploy of new ISE hardware and software
• Review daily logs for managed systems and report on unusual activity
• Participate in the development and maintenance of Standard Operating Procedures (SOPs) associated with managed systems and applications
• Collaborate with IT staff on projects and initiatives
• Provide input for a monthly progress and status report

Qualifications

• Bachelors Degree degree required
• ISE certifications: CCNP (SISE) highly desirable
• Solid experience configuring and troubleshooting routing and switched infrastructure (e.g. CCNA, CCNP Security) and security certifications highly desirable
• Experience in network security including: Device Hardening and patching
• Experience with Cisco AnyConnect or related supplicants.
• Experience with Public Key Infrastructure (PKI) to assist, maintain and troubleshoot 802.1X EAP-TLS issues
• Experience with MAC Authentication Bypass (MAB) and 802.1X troubleshooting concepts.
• Knowledge of Cisco AnyConnect Modules - (VPN, Posture, NAM)
• Diagnose and resolve complex network problems and improve network performance and reliability
• Must currently hold a DoD 8570 Information Assurance Technical Level II certifications
• Position requires a strong understanding of ISE functions and operations (e.g. endpoint identification, authentication, authorization)
• Familiarity with researching communication networks
• Must have strong troubleshooting and critical thinking skills
• Strong attention to detail, good documentation skills, ability to write clear, concise project reports
• Ability to function with minimal instruction or supervision, or as a part of larger team reporting to formal project management

Desired Skills

• Cisco Access Control System (ACS), specifically with "role-based" TACACS commands/profiles
• PxGrid, ThreatGrid and Security Group Tags(SGT's) for back-end communication between Cisco Firepower and ISE server
• Cisco Prime, MDM, ASA, DNS/DHCP, Network Load-Balancing, and 802.11a/b/g/n Wireless technologies and industry best practices.
• Active Directory knowledge(e.g. Organizational Unit(OU) identification, domain "trusts", Domain Name System(DNS), identity resolution)

EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at or .

Apex Systems is a world-class IT services company that serves thousands of clients across the globe. When you join Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRated's Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Apex Benefits Overview: Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6 months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Apex team member can provide.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.