We are seeking a Security Engineer – Network Access Control (NAC) with 2–3 years of hands-on experience in Network Access Control, network security, authentication, and endpoint access management.

The ideal candidate should have practical experience in configuring, implementing, monitoring, and troubleshooting NAC solutions in enterprise network environments. The candidate will work closely with network, security, infrastructure, and customer teams to ensure secure and controlled access to wired and wireless networks.

Experience with NAC platforms such as Cisco ISE, Aruba ClearPass, FortiNAC, or Forescout will be preferred.

1. Network Access Control

• Configure, implement, and maintain Network Access Control solutions.
  
• Manage network access policies for users, endpoints, devices, and different network segments.
  
• Configure authentication and authorisation policies based on organisational requirements.
  
• Support secure access for corporate, guest, BYOD, and IoT devices.
  
• Monitor NAC environments and ensure access policies are functioning as expected.
  
  

2. 802.1X & Authentication

• Configure and troubleshoot 802.1X authentication for wired and wireless networks.
  
• Work with RADIUS, TACACS+, LDAP, and Active Directory authentication.
  
• Troubleshoot authentication failures and endpoint access issues.
  
• Work with certificates and authentication methods such as EAP-TLS.
  
• Support user and device-based authentication policies.
  

3. NAC Implementation & Configuration

• Configure NAC policies, profiles, authentication rules, authorisation rules, and endpoint classifications.
  
• Perform endpoint profiling and device identification.
  
• Configure VLAN assignment and role-based access policies.
  
• Support NAC deployments across enterprise network environments.
  
• Assist with NAC upgrades, migrations, policy changes, and implementation activities.
  

4. Network Troubleshooting

• Troubleshoot network access and authentication-related issues.
  
• Analyse NAC logs and identify the root cause of access failures.
  
• Troubleshoot VLAN, DHCP, DNS, RADIUS, and connectivity-related issues.
  
• Work with network switches, wireless controllers, firewalls, and other network infrastructure.
  
• Coordinate with internal teams and customers to resolve technical issues.
  
  

5. Network Security

• Implement network access policies based on security requirements.
  
• Support endpoint compliance and posture assessment.
  
• Identify unauthorised or non-compliant devices attempting to access the network.
  
• Assist in implementing segmentation and role-based network access.
  
• Support security monitoring and incident investigation related to network access
  
  

6. NAC Integration

Integrate NAC solutions with:

• Active Directory
  
• RADIUS
  
• LDAP
  
• DHCP
  
• DNS
  
• Network Switches
  
• Wireless Controllers
  
• Firewalls
  
• SIEM / Security Monitoring Platforms
  
• Endpoint Security Platforms
  

7. Customer & Project Support

• Work with customers during NAC implementation and troubleshooting activities.
  
• Participate in deployment, configuration, testing, and documentation.
  
• Understand customer requirements and translate them into NAC policies.
  
• Provide technical support during implementation and post-deployment activities.
  
• Coordinate with OEMs and technology partners when required.
  

8. Monitoring & Reporting

Monitor and report:

• Authentication failures
  
• Endpoint onboarding status
  
• Unauthorized devices
  
• NAC incidents
  
• Policy violations
  
• Endpoint profiling
  
• Network access issues
  
• System health and availability
  

Prepare technical reports and maintain appropriate NAC documentation.

9. Documentation

• Maintain NAC configuration documentation.
  
• Document network access policies and authentication flows.
  
• Prepare implementation and troubleshooting guides.
  
• Maintain network diagrams and configuration records.
  
• Ensure technical documentation is updated following changes or deployments.
  

10. Team Collaboration

• Coordinate with Network, Security, Server, Cloud, and IT Infrastructure teams.
  
• Work with OEM technical support teams when required.
  
• Support senior engineers and technical managers during complex NAC implementations.
  
• Participate in knowledge-sharing and technical training activities.
  

· Strong understanding of Network Access Control (NAC).

· Hands-on experience with at least one NAC platform:

· Cisco ISE

· Aruba ClearPass

· FortiNAC

· Forescout

· Good understanding of 802.1X authentication.

· Knowledge of RADIUS and TACACS+.

· Knowledge of Active Directory and LDAP.

· Understanding of TCP/IP, VLAN, DHCP, DNS, switching, and routing.

· Knowledge of wired and wireless network authentication.

· Experience in troubleshooting authentication and network access issues.

· Understanding of endpoint profiling and device classification.

· Basic understanding of network security concepts.

· Good analytical and troubleshooting skills.

· Excellent communication and coordination skills.

• 2–3 years of experience in NAC / Network Security / Network Engineering.
  
• Hands-on experience with Cisco ISE or Aruba ClearPass.
  
• Experience working with enterprise network environments.
  
• Experience with wired and wireless 802.1X implementation.
  
• Experience integrating NAC with Active Directory and RADIUS.
  
• Experience with endpoint profiling and posture assessment.
  
• Knowledge of Cisco switching and wireless infrastructure.
  
• Experience working in customer-facing implementation or support environments.
  
• Relevant networking or security certifications will be an added advantage.
  

· Bachelor's degree in Computer Science, Information Technology, Electronics, Networking, or a related field.

·