Role: Network Engineer with WLC and ISE skills

Job Description: Seeking a skilled and experienced Wireless LAN Controller (WLC) Administrator with expertise in Cisco Identity Services Engine (ISE) and Cisco Digital Network Architecture Center (DNAC) to join our dynamic IT infrastructure team. The ideal candidate will have 5-7 years of hands-on experience in managing and optimizing Wireless LAN Controllers (WLC) and related technologies in large-scale enterprise environments. Must have expertise in both Cisco and Aruba environments. Responsible for the deployment, configuration, troubleshooting, and maintenance of wireless networking solutions, ensuring seamless connectivity, security, and performance for our enterprise-level network infrastructure.

Key Responsibilities:

·        WLC Configuration and Management:

o   Install, configure, and manage Aruba Wireless LAN Controllers (Aruba 7200 Series, 9000 Series) for both remote and on-premises locations. Integration of Mobility Controller with Mobility Master.

o   Install, configure, and manage Cisco Wireless LAN Controllers (Cisco 9800 Series, 3504, 5520, Embedded Wireless Controllers) for both remote and on-premises locations. Configuration of Central switching (Local) OR Flex Connect mode-based Deployment.

o   Deploy and optimize wireless networks to support thousands of users, devices, and high traffic loads.

o   Ensure integration with other networking equipment and systems (e.g., switches, routers, access points such as Cisco Catalyst 9100 Series, Aruba AP500 Series).

o   Provide second and third-level support for wireless network-related incidents.

o   Perform troubleshooting and resolve issues related to wireless network connectivity, performance, and security.

o   Collaborate with security teams to ensure network policies meet corporate compliance standards.

o   Monitor wireless network security, conduct vulnerability assessments and apply best practices to mitigate risks.

o   Assist in designing wireless network architecture for new projects and expansions.

o   Conduct site surveys and RF planning to ensure optimal coverage and performance.

o   Optimize the wireless network, including load balancing, roaming, and client performance improvements.

o   Plan, test, and execute firmware and software upgrades for WLCs and APs.

o   Ensure minimal downtime and compatibility with all other network components during upgrades.

o   Maintain up-to-date documentation of all configurations, network topologies, and change requests.

o   Generate and present regular reports on network performance, usage statistics, and any incidents.

o   Work closely with other IT teams (e.g., network, security, and operations) to implement solutions and resolve issues.

o   Proven track record of managing large-scale enterprise wireless networks with hardware and software.

o   Solid understanding of networking protocols, including DHCP, DNS, SNMP, QoS, VLANs, and routing protocols.

o   In-depth knowledge of wireless technologies such as 802.11ac/ax, WPA2/WPA3, 802.1X authentication, RADIUS, TACACS.

o   Experience with network security tools and technologies, including VPNs, firewalls, and intrusion detection systems.

o   Experience with Guest wireless, including pre- and post-authentication using ISE Guest self-registration & Sponsor portal, along with configuration of Guest redirect ACL and roles.

• Cisco Identity Services Engine (ISE)

o   Design, configure, and manage Cisco ISE solutions for network access control, authentication, and security.

o   Integrate Cisco ISE with various network devices and security platforms, including switches, routers, and firewalls.

o   Implement 802.1X authentication and other security policies for wired, wireless, and VPN networks.

o   Troubleshoot and resolve issues related to device provisioning, authentication, and network access.

o   Maintain and update Cisco ISE software versions, including patches and hotfixes.

o   Ensure compliance with internal and external security standards.

o   Work closely with cross-functional teams to integrate network solutions and maintain robust network security.

o   Perform regular network performance assessments and propose improvements.

o   Collaborate with other network engineers and IT teams to support overall infrastructure projects.

o   Minimum of [3-5] years of experience in network engineering, with a focus on Cisco ISE.

o   Proven experience in configuring, maintaining, and troubleshooting Cisco ISE for secure network access.

o   Solid understanding of networking concepts (TCP/IP, routing, switching, VLANs, VPNs, etc.).

o   Deep knowledge of Cisco ISE policies, device profiling, posture assessments, and guest access.

o   Expertise in network security and access control methods such as 802.1X, MAC Authentication Bypass (MAB), and RADIUS.

o   Familiarity with Cisco SD-Access and Cisco SD-WAN architectures.

o   Guest access Deployment by using Cisco ISE captive & Sponsor Portal.

o   Deep knowledge of Policy sets & Authorization rule in ISE deployment.