ISE Network Engineer

The primary responsibility of the Comply to Connect (C2C) Network Engineer SME is to plan, design, deploy, and support a mission-critical project for the Cisco Identity Services Engine (ISE) and Armis Agentless Device Security Platform. Secondary responsibilities include the deployment and continued support of enterprise network infrastructure systems in the areas of Route/Switch, Security, and Wireless technologies. Technologies utilized include: Juniper, Ruckus, Aruba, Cisco switches, Palo Alto Firewall, Panorama, and enterprise wireless solutions. The position also requires demonstrated competence in LAN/WAN technologies and coordination with cross-functional teams supporting physical and virtual network infrastructure such as VMware, Linux, Windows Server, and enterprise storage systems.

Responsibilities:

Administration

• Collaboration: Participate in planning meetings to recommend technical and cost-effective network solutions meeting capacity, scalability, and performance needs.
• Change Control: Follow change management policies and procedures, including documentation, submission, review, and participation in weekly change meetings.
• Documentation: Maintain documentation for projects, configurations, and incidents for reference by team members and management.
• Incident and Request Management: Complete all incidents and service requests within organizational SLTs and SLAs.
• Knowledge Sharing: Share technical and non-technical knowledge with team members formally and informally to strengthen team skillsets.
• Personal Development: Pursue ongoing technical and professional development through certifications, training, and conferences.
• Project Support and Leadership: Serve as project lead or technical resource for Enterprise Network Engineering team initiatives.
• Status Reporting: Provide periodic status updates to management and during team meetings.

Network Administration

• Network Access Control (NAC) Projects: Design, plan, deploy, upgrade, and support Cisco ISE and Armis solutions for wired and wireless networks.
• Network Infrastructure Support: Support network architecture, investigate performance and configuration issues, and collaborate with application teams to resolve system-level concerns.
• Network Administration: Perform installation, configuration, backup, and maintenance for network systems ensuring continued stability and performance.
• Monitoring and Optimization: Monitor, troubleshoot, and optimize deployed network systems; provide detailed root cause analyses and recommendations.
• Security: Partner with the Enterprise Security Architecture team to design, implement, and maintain compliance with organizational security requirements.
• Technical System Support: Work with Enterprise Network Engineering and Architecture teams to implement and maintain enterprise network infrastructure; assist with capacity planning, system architecture, and issue resolution.

C2C System Administrator (SA)

• Perform system administration tasks for C2C infrastructure, including operations, sustainment, troubleshooting, and maintaining security posture.
• Manage ISE configuration, endpoint compliance, and policy enforcement to ensure users and devices meet Cisco ISE security requirements before gaining network access.
• Provide resolution for issues impacting the C2C solution and supporting infrastructure.
• Review, analyze, test, and implement vendor patches, upgrades, and configuration changes.
• Provision and manage PKI certificates on servers.
• Assist with platform and software upgrades, ensuring smooth implementation and appropriate capacity.
• Support C2C/ISE system testing prior to upgrades to ensure transparency and minimal disruption.

Requirements:

• Must report in person to the job site due to CLASSIFIED network access requirements; 2-3 times per week
• Must be able to obtain and maintain a Top Secret (TS) Security Clearance
• Must hold DoD 8570 IAT Level II certification (e.g., Security+ CE).
• SME-level proficiency configuring and managing profiling services to identify and categorize endpoints.
• SME-level experience developing and implementing posture policies to enforce compliance.
• SME-level ability to troubleshoot profiling, posture assessments, and compliance issues.
• SME-level understanding of ISE's profiling dictionaries for accurate device classification.
• 8+ years of experience with Cisco ISE or comparable NAC solutions (e.g., Forescout), network platforms: Cisco, Juniper, Brocade/Ruckus, Active Directory, and firewalls in production environments.
• 6+ years of experience with network authentication protocols (802.1x, RADIUS, TACACS+, MACSEC).
• 8+ years of experience configuring and troubleshooting switches, routers, and Layer 2 technologies.

Preferred Qualifications:

• Bachelor's degree in computer science, Information Systems, or IT with 5+ years of experience, or 8+ years of directly related experience.
• 8570 Compliant / CCNA OS certification

Why Work for Us?

Core4ce is a team of innovators, self-starters, and critical thinkers-driven by a shared mission to strengthen national security and advance warfighting outcomes.

We offer:

• 401(k) with 100% company match on the first 6% deferred, with immediate vesting
• Comprehensive medical, dental, and vision coverage-employee portion paid 100% by Core4ce
• Unlimited access to training and certifications, with no pre-set cap on eligible professional development
• Tuition assistance for job-related degrees and courses
• Paid parental leave, PTO that grows with tenure, and generous holiday schedules
• Got a big idea? At Core4ce, The Forge gives every employee the chance to propose bold innovations and help bring them to life with internal backing.

Join us to build a career that matters-supported by a company that invests in you.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, disability, veteran status, age, genetic information, or other legally protected status.