Senior Cisco ISE Network & Industrial Cybersecurity Specialist

Responsibilities

• Design, implement, and maintain Cisco ISE environments from initial architecture through production deployment.
• Lead greenfield and brownfield Cisco ISE implementations for industrial manufacturing facilities.
• Develop and enforce network access control (NAC) policies using Cisco ISE.
• Configure and manage 802.1X authentication.
• Configure and manage MAB (MAC Authentication Bypass).
• Configure and manage TACACS+.
• Configure and manage RADIUS.
• Configure and manage certificate-based authentication (PKI).
• Configure and manage guest and contractor access.
• Design and implement secure segmentation strategies for IT/OT environments.
• Develop security policies aligned with ISA/IEC 62443 and industrial cybersecurity best practices.
• Support the complete infrastructure lifecycle, including design, deployment, testing, commissioning, optimization, documentation, and maintenance & upgrades.
• Perform Cisco ISE upgrades, migrations, backup, disaster recovery planning, and health assessments.
• Configure and troubleshoot Cisco Catalyst and Industrial Ethernet switches.
• Work closely with cybersecurity, controls engineering, IT infrastructure, and plant operations teams.
• Support industrial control systems while minimizing production downtime.
• Monitor network performance, investigate security incidents, and resolve authentication issues.
• Create technical documentation, network diagrams, standard operating procedures, and implementation guides.
• Participate in cybersecurity audits, vulnerability assessments, and remediation activities.
• Provide technical leadership during commissioning, plant startups, and major network upgrades.
• Administration and maintenance of Cisco ISE infrastructure.
• Creation and modification of authentication and authorization policies.
• Device onboarding and profiling.
• Endpoint identity management.
• Troubleshooting authentication failures and connectivity issues.
• Monitoring system health, logs, alarms, and security events.
• Supporting certificate renewals and PKI integration.
• Managing software upgrades and patching activities.
• Supporting network deployments across multiple manufacturing sites.
• Collaborating with engineering teams on new production lines and plant expansions.
• 7+ years of experience in Cisco enterprise networking.
• 5+ years of hands-on Cisco ISE administration and deployment experience.
• Proven experience implementing Cisco ISE from initial design through production rollout.
• Strong understanding of enterprise authentication technologies.
• Experience with Cisco Catalyst, Industrial Ethernet (IE) switches, and Cisco DNA environments.
• Extensive knowledge of: Cisco ISE, 802.1X, RADIUS, TACACS+, PKI, Active Directory integration & Network segmentation.
• Experience deploying secure IT/OT architectures.
• Strong troubleshooting skills in complex enterprise and industrial environments.
• Experience in heavy industrial manufacturing.
• Steel industry experience is highly preferred.
• Experience supporting Level 1 and Level 2 automation networks.
• Familiarity with industrial protocols, including PROFINET, EtherNet/IP, Modbus TCP, OPC UA.
• Knowledge of Cisco Secure Firewall (Firepower), Cisco Secure Network Analytics (Stealthwatch) and Cisco Secure Access.
• Experience with VMware, Windows Server, DNS, DHCP, and Active Directory.
• Familiarity with Cisco SDA (Software Defined Access).
• Strong analytical and problem-solving abilities.
• Excellent communication and documentation skills.
• Ability to work independently and lead technical initiatives.
• Comfortable interacting with plant personnel, operations teams, and executive stakeholders.
• Strong planning and organizational skills.
• Ability to perform under pressure during critical production events and commissioning activities.
• Experience supporting large-scale industrial modernization projects.
• Experience working with multinational manufacturing organizations.
• Ability to travel to manufacturing sites as required.
• Previous experience leading industrial network security projects from conception through long-term operational support.

Requirements

• 7+ years of experience in Cisco enterprise networking.
• 5+ years of hands-on Cisco ISE administration and deployment experience.
• Proven experience implementing Cisco ISE from initial design through production rollout.
• Strong understanding of enterprise authentication technologies.
• Experience with Cisco Catalyst, Industrial Ethernet (IE) switches, and Cisco DNA environments.
• Extensive knowledge of: Cisco ISE, 802.1X, RADIUS, TACACS+, PKI, Active Directory integration & Network segmentation.
• Experience deploying secure IT/OT architectures.
• Strong troubleshooting skills in complex enterprise and industrial environments.

Technologies

• Cisco ISE
• 802.1X
• MAB (MAC Authentication Bypass)
• TACACS+
• RADIUS
• PKI
• Active Directory
• Cisco Catalyst
• Industrial Ethernet switches
• Cisco DNA environments
• PROFINET
• EtherNet/IP
• Modbus TCP
• OPC UA
• Firepower
• Stealthwatch
• Cisco Secure Access
• VMware
• Windows Server
• DNS
• DHCP
• SDA (Software Defined Access)

Benefits

• Health insurance

Job Type

Full-time

Salary

Up to USD 90,000 per year

Location

Osceola, AR (onsite)