← All roles

Network Security Engineer

Agile Defense· Digital Transformation – Network Operations
Apply on company site
Suitland, MD$100k - $115kRegularPosted 1mo ago

About the role

Senior Network Security Engineer to support migration from ForeScout CounterACT to Cisco ISE, configuring and managing Cisco ISE across the environment, integrating with AD/LDAP, and enforcing Zero Trust policies in a large government setting.

Responsibilities

  • Troubleshoot and resolve Cisco ISE issues across RADIUS, TACACS+, 802.1X, device administration, and endpoint authentication.
  • Deploy, configure, and maintain Cisco ISE running on two clustered Cisco SNS 3715 appliances, ensuring high availability and consistent policy enforcement.
  • Support the agency’s migration from ForeScout CounterACT to Cisco ISE, including reviewing legacy ForeScout policies, device groups, and access rules and mapping them into ISE policy sets.
  • Provide general wireless support, including basic troubleshooting, wireless access workflows, and coordination with wireless infrastructure teams.
  • Configure and support Cisco ISE integrations with Cisco 9800 WLCs, including guest/registration portals, wireless onboarding, and policy driven access control.
  • Integrate and maintain Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based authorization, and directory based authentication workflows.
  • Deploy, configure, and maintain Cisco ISE components, including: Policy Sets, Authorization Profiles, and Authentication Rules; TACACS+ device administration; 802.1X for wired and wireless networks; Profiling, posture, and compliance policies; Certificate based authentication and PKI integrations.
  • Monitor security events using ISE logs, syslog, and performing root cause analysis for authentication and access issues.
  • Manage identity integrations, enforce security policies, and tune configurations to support Zero Trust and improve user experience.
  • Perform routine health checks, upgrades, migrations, and document changes through SOPs, engineering designs, and implementation procedures.
  • Work closely with engineering, operations, and compliance teams while mentoring junior staff and contributing to knowledge sharing efforts.

Qualifications

  • Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
  • Eight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE.
  • Four (4) years of experience supporting identity centric or Zero Trust architectures with strong knowledge of segmentation, certificate management, and endpoint posture controls.

Skills

Required:Cisco ISERADIUS / TACACS+802.1X (wired and wireless)Active Directory / LDAPForeScout CounterACT (legacy)

Benefits

  • Health Insurance
  • Life Insurance
  • Paid Time Off
  • Holiday Pay
  • short-term and long-term Disability
  • Retirement
  • Learning and Development opportunities
  • other optional benefit elections
Last updated Oct 21, 2026. Interested? Apply on the company site.

About Agile Defense

Always Evolving

Agile Defense delivers advanced capabilities and solutions tailored to the most critical national security and civilian missions.

national securitycivilian missionsinnovationcapabilitiessolutions
Company profileWebsite

More open roles at Agile Defense