Cisco Identity Services Engine (ISE)

Position Summary

We are seeking an experienced Cisco professional. This position requires to designs, deploy, configure, and maintains network access control and security policies using Cisco Identity Services Engine, advanced knowledge of Cisco ISE , Cisco DNAC, router/switch, wireless, and third-party security products is must. This role will be responsible for managing and securing the environment and will implement LAN and WLAN security using ISE. All facets of this role will regularly collaborate with other regional experts and will require excellent communication skills.

Responsibilities:

· Policy Management: Configure and manage authentication, authorization, and accounting (AAA) rules, policy sets, and network access policies.

· Access Control & Protocols: Support 802.1X, MAB (MAC Authentication Bypass), RADIUS, TACACS+, and certificate-based authentication.

· System Operations: Monitor node health, handle patching, perform software upgrades, run backups, and manage certificates.

· Integration: Integrate ISE with Active Directory, PKI infrastructure, and wired/wireless network hardware.

· Troubleshooting & Incident Response: Diagnose complex connectivity and authentication issues, perform root cause analysis (RCA), and resolve escalated operational alerts.

· Global responsibility for ISE solution and management

· Provide level 2/3 support for ISE related issues, including off-shift and weekend support functions

· Escalating and engaging with L4 vendor support teams

· Engaging across domains to address level 2/3 ISE support issues (e.g., PKI, Server, WAN, Web Acceleration, Security, AnyConnect)

· Monitoring and alert management of all components related to the ISE solution, Video Network Operations Center (VNOC)

· Ongoing maintenance and support of solution components (e.g., patching, upgrades, capacity reviews, lifecycle management)

· Ongoing moves, adds, changes to ISE solution (e.g., new device profiles)

· Hardware replacement management

· Monitoring and running ISE reports

· Managing administrative access controls

· Managing of switch configuration templates

· Perform implementation and integration tasks for medium to large complex projects

· Documentation of configurations and changes.

Qualifications:

· Education: Bachelor’s degree in computer science, Information Technology, or a related field.

· Technical Knowledge: Strong grasp of TCP/IP, DNS, DHCP, and Layer 2/Layer 3 network troubleshooting.

· Certifications: required professional certifications like CCNP Security or Cisco ISE Specialization.

· Soft Skills: Excellent analytical thinking and cross-functional communication abilities.7-8 years of progressively responsible IT network job-related experiences

· Cisco Identity Services Engine (ISE) implementation and support experience

· Cisco ACS RADIUS and Terminal Access Controller Access Control System (TACACS) experience

· Cisco DNAC integration with ISE experience

· Solid experience configuring, deploying, installing, and troubleshooting Cisco routers, switches, and WLAN components in a medium to large business

· Cisco controller-based WLAN configuration and support

· Desktop and mobile device support experience

· Cisco Certified Network Professional certification (CCNP) or CCNP Security desired

· Cisco, Route/Switch, ISE, WAN, LAN, WLAN, Wireless

· All facets of this role will regularly collaborate with other regional experts and will require excellent communication skills

Pay: Php80,000.00 - Php90,000.00 per month

Benefits:

• Company Christmas gift
• Company events
• Health insurance
• Life insurance
• Opportunities for promotion

Ability to commute/relocate:

• Cavite City, Cavite: Reliably commute or planning to relocate before starting work (Preferred)

Application Question(s):

• How many years of TCP/IP, DNS, DHCP, and Layer 2/Layer 3 network troubleshooting experience do you have?

• How many years of configuring, deploying, installing, and troubleshooting Cisco routers, switches, and WLAN components experience do you have?

• This is full onsite in Cavite/Laguna. Are you amenable?

Education:

• Bachelor's (Preferred)

Experience:

• IT network job-related: 5 years (Preferred)
• Cisco ISE implementation & support: 5 years (Preferred)
• Cisco ACS RADIUS and TACACS: 5 years (Preferred)
• Cisco DNAC integration with ISE: 5 years (Preferred)
• Cisco, Route/Switch, ISE, WAN, LAN, WLAN, Wireless: 5 years (Preferred)

License/Certification:

• CCNP Security / Cisco ISE Specialization / CCNP (Preferred)

Work Location: In person