Senior Network Engineer

Hello,• Job Title: Senior Network Engineer

• Duration: Not specified — confirm with account team
• Location: Santa Clara, CA — local candidates only
• Work Arrangement: Onsite 5 days/week
• Rate: C2C — pending confirmation
• Work Authorization - USC and GC
• Interview Process: Onsite, face-to-face interview mandatory at the Santa Clara office — no remote interviews

KEY RESPONSIBILITIES• Design, deploy, and maintain Cisco ISE solutions for authentication, authorization, and accounting (AAA)

• Implement and support NAC policies using 802.1X, MAB, posture assessment, profiling, and guest access
• Integrate Cisco ISE with Active Directory, PKI, MDM, SIEM, and other security platforms
• Troubleshoot complex authentication/authorization issues across wired and wireless networks
• Design, implement, and optimize enterprise wireless networks using Cisco Catalyst and Wireless LAN Controllers
• Configure and troubleshoot WPA2/WPA3, RF optimization, roaming, QoS, and high-density deployments
• Conduct wireless surveys, capacity planning, and performance tuning
• Design, implement, and support enterprise LAN/WAN infrastructure, including VLANs, STP/RSTP/MST, EtherChannel, HSRP/VRRP, OSPF, BGP, EIGRP, and multicast
• Lead network infrastructure projects from design through deployment
• Create and maintain network architecture diagrams, operational procedures, and technical documentation
• Participate in incident response and root cause analysis for critical network outages
• Collaborate with security, systems, cloud, and application teams to support business initiatives

REQUIREMENTS / MUST-HAVES• Bachelor's degree in Computer Science, IT, Engineering, or equivalent experience

• 8+ years of enterprise network engineering experience
• 5+ years of hands-on experience with Cisco ISE and NAC deployments
• Strong expertise in Cisco Catalyst switching and routing platforms
• Extensive experience with enterprise wireless technologies
• Deep understanding of 802.1X, RADIUS, TACACS+, AAA services, DHCP, DNS, TCP/IP
• Experience integrating ISE with Active Directory and certificate services
• Strong troubleshooting, analytical, and communication skills
• Preferred: CCNP Enterprise, CCNP Security, or CCIE certification
• Preferred: Cisco DNA Center and Software Defined Access (SDA) experience
• Preferred: network automation experience with Python, Ansible, REST APIs, or Terraform
• Preferred: cloud networking knowledge (Azure, AWS, or GCP); Zero Trust and modern security architecture understanding

ADDITIONAL CONTEXT• Desired skills: Cisco ISE, NAC, Cisco Wireless, Catalyst 9K Series, OSPF/BGP/EIGRP, SDA Fabric, Cisco DNA Center, 802.1X Authentication, Network Security, Python Automation, Enterprise LAN/WAN