| Network Administrator at Remote, Remote, USA |
| Email: [email protected] |
| From: Nitish, epeopletech [email protected] Reply to: [email protected] Cisco Identity Service Engine (ISE) 10 & Above 1. Design and architect scalable Cisco ISE deployments, considering factors such as high availability, redundancy, and performance optimization 2. Develop detailed network diagrams, including physical and logical topologies, for Cisco ISE deployments 3. Configure Cisco ISE nodes, personas (Administration, Policy Service, and Monitoring), and services (Authentication, Authorization, and Accounting). 4. Implement identity sources such as Active Directory, Lightweight Directory Access Protocol (LDAP), and external RADIUS servers for user authentication 5. Create and customize authentication and authorization policies using Cisco ISE Policy Sets, Policy Elements, and Policy Conditions 6. Configure Cisco ISE Profiler policies to classify and enforce access controls based on device types and attributes 7. Integrate Cisco ISE with Cisco switches (e.g., Catalyst, Nexus) using IEEE 802.1X, Cisco TrustSec, and Cisco AnyConnect for secure network access 8. Implement Cisco ISE pxGrid integration with third-party security products for real-time threat detection and response 9. Troubleshooting skills on Cisco ISE to resolve authentication and authorization issues 10. Implement Cisco ISE Posture Assessment policies to enforce endpoint security compliance with organizational policies and industry standards (e.g., HIPAA, PCI DSS). 11. Should be able to configure Cisco ISE Guest Services to provide secure guest access with self-registration, sponsor approval workflows, and captive portal authentication. 12. Document Cisco ISE deployment configurations, including network device profiles, identity stores, authentication and authorization policies, and posture assessment rules 13. Perform Cisco ISE software upgrades, patches, and hotfix installation per Cisco recommendations 14. Collaborate with IT security teams to define and implement Cisco ISE Threat-Centric NAC policies for dynamic threat containment and response 15. Communicate effectively with stakeholders to gather requirements, assess risks, and provide recommendations for enhancing network security posture with Cisco ISE 16. Network devices configuration, administration and troubleshooting skills 17. Deep understanding and troubleshooting skills of TCP/IP, Switching & Routing protocols, WLAN, ISE platform 18. Knowledge and experience in STP, VTP, HSRP, VLAN, QoS and other switching technologies19. Prepare/update HLD & LLD and technical project documentation or presentation 20. Product knowledge: Cisco Identity Service Engine (ISE) Cisco Router (ISR, ASR) Switches -- Nexus 9K/7K/2K, Cisco 6500/4500/3750/2960 Cisco WirelessGood-To-Have 1. Cisco ISE Profession/Expert level certification 2. Cisco certifications such as CCNP Security or CCIE Security to demonstrate expertise in network access control and identity management with Cisco ISE 1. Design and architect scalable Cisco ISE deployments, considering factors such as high availability, redundancy, and performance optimization 2. Develop detailed network diagrams, including physical and logical topologies, for Cisco ISE deployments 3. Configure Cisco ISE nodes, personas (Administration, Policy Service, and Monitoring), and services (Authentication, Authorization, and Accounting). 4. Implement identity sources such as Active Directory, Lightweight Directory Access Protocol (LDAP), and external RADIUS servers for user authentication 5. Create and customize authentication and authorization policies using Cisco ISE Policy Sets, Policy Elements, and Policy Conditions 6. Configure Cisco ISE Profiler policies to classify and enforce access controls based on device types and attributes 7. Integrate Cisco ISE with Cisco switches (e.g., Catalyst, Nexus) using IEEE 802.1X, Cisco TrustSec, and Cisco AnyConnect for secure network access 8. Implement Cisco ISE pxGrid integration with third-party security products for real-time threat detection and response 9. Troubleshooting skills on Cisco ISE to resolve authentication and authorization issues 10. Implement Cisco ISE Posture Assessment policies to enforce endpoint security compliance with organizational policies and industry standards (e.g., HIPAA, PCI DSS). 11. Should be able to configure Cisco ISE Guest Services to provide secure guest access with self-registration, sponsor approval workflows, and captive portal authentication. 12. Document Cisco ISE deployment configurations, including network device profiles, identity stores, authentication and authorization policies, and posture assessment rules 13. Perform Cisco ISE software upgrades, patches, and hotfix installation per Cisco recommendations 14. Collaborate with IT security teams to define and implement Cisco ISE Threat-Centric NAC policies for dynamic threat containment and response 15. Communicate effectively with stakeholders to gather requirements, assess risks, and provide recommendations for enhancing network security posture with Cisco ISE 16. Network devices configuration, administration and troubleshooting skills 17. Deep understanding and troubleshooting skills of TCP/IP, Switching & Routing protocols, WLAN, ISE platform 18. Knowledge and experience in STP, VTP, HSRP, VLAN, QoS and other switching technologies19. Prepare/update HLD & LLD and technical project documentation or presentation 20. Product knowledge: Cisco Identity Service Engine (ISE) Cisco Router (ISR, ASR) Switches -- Nexus 9K/7K/2K, Cisco 6500/4500/3750/2960 Cisco WirelessGood-To-Have 1. Cisco ISE Profession/Expert level certification 2. Cisco certifications such as CCNP Security or CCIE Security to demonstrate expertise in network access control and identity management with Cisco ISE Thanks and Regards, Nitish Kumar ePeople Technologies Inc 255 Baldwin Road, Suite 205, Parsippany, NJ 07054 Email- [email protected] Linkedin- https://www.linkedin.com/in/nitish-kumar-2b5635259/ http://www.epeopletech.com Keywords: information technology New Jersey Network Administrator [email protected] |
| [email protected] View all |
| Tue Jun 04 05:19:00 UTC 2024 |