{"id":940202,"url":"https://alion.io/job/agiledefense-network-security-engineer","title":"Network Security Engineer","company":{"id":716156,"name":"Agile Defense","domain":"agiledefense.com","url":"https://alion.io/company/agiledefense","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":77,"open_postings":38,"ghost_share":0,"stale_share":0.921,"repost_share":0,"time_to_fill_p50_days":37,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Suitland, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":100000,"max":115000,"currency":"USD","period":"year","gross":null,"usd_annual":115000},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Agile","optional":false},{"name":"LDAP","optional":false},{"name":"PKI","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-09-15T14:36:18Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-11-06T21:12:07Z","board_verified":true,"closed_at":null,"days_open":52,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":52},"description":"Requisition #: 1853\nJob Title: Network Security Engineer\nLocation: Suitland, MD\nClearance Level: Public Trust\nJob Description\nAgile Defense is seeking a Senior Network Security Engineer to support the agency as it moves away from its legacy ForeScout CounterACT NAC/NAM system and adopts Cisco Identity Services Engine (ISE) as the new access control platform. The engineer will help configure and manage Cisco ISE across the environment, handling AAA services, wired and wireless 802.1X authentication, device administration, and posture checks for users and devices.\nThis role also supports the agency’s modernization work by improving authentication processes, updating ISE policies, and strengthening identity-based access controls. The engineer will troubleshoot access issues, refine policy designs, and help ensure users and devices can connect securely and reliably as the organization completes its transition from ForeScout to Cisco ISE.\nTroubleshoot and resolve Cisco ISE issues across RADIUS, TACACS+, 802.1X, device administration, and endpoint authentication.\nDeploy, configure, and maintain Cisco ISE running on two clustered Cisco SNS 3715 appliances, ensuring high availability and consistent policy enforcement.\nSupport the agency’s migration from ForeScout CounterACT to Cisco ISE, including reviewing legacy ForeScout policies, device groups, and access rules and mapping them into ISE policy sets.\nProvide general wireless support, including basic troubleshooting, wireless access workflows, and coordination with wireless infrastructure teams.\nConfigure and support Cisco ISE integrations with Cisco 9800 WLCs, including guest/registration portals, wireless onboarding, and policy driven access control.\nIntegrate and maintain Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based authorization, and directory based authentication workflows.\nDeploy, configure, and maintain Cisco ISE components, including:o Policy Sets, Authorization Profiles, and Authentication Rules\no TACACS+ device administration\no 802.1X for wired and wireless networks\no Profiling, posture, and compliance policies\no Certificate based authentication and PKI integrations\n\nMonitor security events using ISE logs, syslog, and performing root cause analysis for authentication and access issues.\nManage identity integrations, enforce security policies, and tune configurations to support Zero Trust and improve user experience.\nPerform routine health checks, upgrades, migrations, and document changes through SOPs, engineering designs, and implementation procedures.\nWork closely with engineering, operations, and compliance teams while mentoring junior staff and contributing to knowledge sharing efforts.\nEducation and Background\nBachelor’s degree in Information Technology, Cybersecurity, or a related field.\nYears of Experience\nEight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE.\nFour (4) years of experience supporting identity centric or Zero Trust architectures with strong knowledge of segmentation, certificate management, and endpoint posture controls.\nRequired Skills\nSenior Network Security Engineer responsible for designing, configuring, monitoring, and troubleshooting Cisco ISE as a NAC/NAM platform, including TACACS+/RADIUS services, device administration policies, and wired/wireless 802.1X authentication.\nEight (8) years of experience in a large government organization with five (5) years in technical leadership, including four (4) years implementing and troubleshooting Cisco ISE with expertise in:o Authentication and authorization policies (RADIUS/TACACS+)\no 802.1X/EAP methods for wireless and wired access\no Device profiling, posture checks, and endpoint compliance\no Certificate based authentication (EAP TLS) and PKI integration\no AAA integrations for switches, appliances, firewalls, and wireless controllers\n\nExperience working with Cisco ISE deployed on Cisco SNS 3715 appliances, preferably in a two node clustered, high availability setup.\nUnderstanding of ForeScout CounterACT, including legacy NAC/NAM policies, device classification, and access workflows, to support the migration to Cisco ISE\nExperience providing general wireless network support, including basic troubleshooting, controller interactions, and wireless access workflows.\nHands on experience integrating Cisco ISE with Active Directory (AD) and LDAP, including identity lookups, group based policy decisions, and directory based authentication.\nExperience supporting Cisco ISE integrations with Cisco 9800 Wireless LAN Controllers, including guest/registration page redirection and wireless onboarding.\nExperience migrating legacy NAC, RADIUS, or device authentication systems into Cisco ISE while aligning with Zero Trust principles.\nSolid understanding of telecommunications, network security, and Zero Trust best practices.\nStrong communication skills with the ability to explain Cisco ISE, NAC/NAM, and AAA concepts to both technical and non technical audiences.\n\nPreferred Skills\nPreferred certifications: Cisco CCNP Security, Cisco ISE Specialist, or similar identity/security certifications.\nWorking Conditions\nOn-site 5 days a week in Suitland, Maryland","description_format":"text","description_chars":5319,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Digital Government","Managed Security","Cloud Consulting & Migration"],"lifecycle":[{"event":"open","at":"2026-09-15T17:06:37Z"}],"visa":[],"liveness":{"score":27,"band":"fade","label":"Fading","p_open":1,"p_active":0.603,"p_room":0.44,"age_days":51,"expected_fill_days":37,"reasons":["conf:2","stale_co","urgency","velocity","win:tail","crowd:brand"],"computed_at":"2026-11-06T05:58:05Z"},"pay":{"stated_usd_annual":115000,"is_top_pay":false},"html_url":"https://alion.io/job/agiledefense-network-security-engineer","json_url":"https://alion.io/job/agiledefense-network-security-engineer.json","meta":{"generated_at":"2026-11-06T23:28:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3033,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":716156},"rest":"https://alion.io/mcp/rest/get_company?id=716156"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fagiledefense-network-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fagiledefense-network-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fagiledefense-network-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/agiledefense-network-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fagiledefense-network-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":940202}},{"tool":"search_jobs","arguments":{"company":"agiledefense.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":940202},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}