Job ID: NC-597859(95890904)
Network Engineer (CCNP/CCIE) with Identity Service Engine, TACACS/ACS, Active Directory, wireless security, AAA and domain certificate install experience
Location: Raleigh, NC(NCDHHS)
Duration: 2 months
Interview: In-person only
Positions: 1(1/2)
Cisco CCNP Security Required 7 Years
Cisco CCIE Security Desired 5 Years
Current hands-on Cisco Identity Services Engine experience in a production environment Required 7 Years
Current hands-on Cisco TACACS/ACS experience in a production environment Required 5 Years
Current hands-on experience with Cisco Identity Services Engine and Microsoft Active Directory services integration in a production environment Required 7 Years
Strong level of knowledge and experience with wireless networking authentication and access control functions, AAA implementation and troubleshooting. Required 5 Years
Strong understanding of IT processes and procedures and ability to follow project plans and work independently. Required 7 Years
Configure/reconfigure Cisco wireless LAN controllers to limit guest and staff network access to approved systems and install domain certificate Required 5 Years
Expected Skills: 5-7 years of current hands-on experience with Cisco Identity Services Engine (ISE) and the integration of these services into Cisco wireless and wired networks, Microsoft Active Directory Services and TACACS/ACS services. This experience should include design, configuration, deployment, testing and troubleshooting of the Cisco ISE services and these integrations in a production environment. Current Cisco CCNP Security certification required. Current Cisco CCIE Security certification preferred. Current hands-on experience with Cisco wireless LAN controllers (Cisco 5500 series) preferred.
Description (including, but not limited to):
1.Configuration, installation and testing of Cisco Identity Services Engine (ISE) in a production environment
a. Architectural design and review of Cisco ISE services as it relates to the organization’s Enterprise Active Directory Services structure and associated functionality as well as authentication and access control requirements.
bImplementation of multiple Cisco ISE groups to facilitate customized authentication and access control requirements of the organization and integration with Microsoft Active Directory.
2. Review of current Cisco network infrastructure and administrative tools configuration as it relates to the implementation of the Cisco ISE platform. This includes migration from Cisco ACS to ISE as part of the project.
3. Configure/reconfigure Cisco wireless LAN controllers to limit guest and staff network access to approved systems.
a. Install domain certificates required for implementation of Cisco ISE
4. Advanced level of knowledge and experience with Cisco Identity Services Engine and its use un a medium-scale production environment.
5. Strong level of knowledge and experience with wireless networking authentication and access control functions, AAA implementation and troubleshooting is required.
6. Strong understanding of IT processes and procedures required.
7. Ability to follow project plans and work independently is required.
Leave a Reply