Senior Network Security Engineer - NAC & Load Balancing

Role Overview:

iPivot is looking for an experienced Senior NAC & Load Balancer Engineer with expertise in Network Access Control (NAC), Authentication, Authorization and Accounting (AAA), wireless access control, and application delivery/load-balancing solutions. The role involves implementing, migrating, configuring, and troubleshooting enterprise network security and access infrastructure.

Key Responsibilities:

- Design, configure, migrate, and troubleshoot NAC and AAA solutions using Aruba ClearPass and Cisco Identity Services Engine (ISE).

- Implement and support 802.1X authentication, RADIUS, TACACS+, EAP-TLS/PEAP, endpoint profiling, and role-based access policies.

- Integrate NAC platforms with Active Directory, PKI, certificates, MFA, and enterprise identity services.

- Configure Aruba Mobility Conductor and support its integration with ClearPass for wireless access control.

- Configure and manage Citrix NetScaler ADC/Gateway, including virtual servers, SSL/TLS certificates, persistence, and load-balancing policies.

- Support Cisco AnyConnect/Secure Client authentication and Prisma Access connectivity dependencies.

- Perform platform migrations, cutovers, failover validation, functional testing, and production support.

- Troubleshoot authentication failures, certificate issues, RADIUS/TACACS+ flows, and application connectivity problems.

- Analyze packet captures, authentication logs, and network traffic to identify root causes.

- Prepare implementation runbooks, test scripts, rollback plans, and as-built documentation.

Mandatory Technical Skills:

- Aruba ClearPass: Policy Manager, NAC, RADIUS, TACACS+, endpoint profiling, and certificate-based authentication.

- Cisco ISE: AAA policy sets, 802.1X, endpoint profiling, authorization, and network integration.

- Aruba Mobility Conductor: WLAN access control and ClearPass integration.

- Citrix NetScaler ADC/Gateway: Virtual servers, SSL/TLS, certificates, persistence, and load balancing.

- Strong understanding of network authentication, enterprise access control, and troubleshooting.

Additional Skills:

- Active Directory and PKI.

- EAP-TLS/PEAP and MFA integrations.

- Cisco AnyConnect / Secure Client.

- Prisma Access.

- Packet captures and authentication-flow analysis.

- Enterprise network security implementation and migration.

Certifications:

- Relevant enterprise NAC, network security, or application delivery controller certifications are preferred.

- Aruba ClearPass, Cisco ISE/Security, and Citrix ADC/NetScaler certifications are advantageous.

Ideal Candidate:

- A senior network security engineer with hands-on expertise in NAC, AAA, wireless access control, and Citrix NetScaler load balancing, along with strong troubleshooting and client-facing communication skills.

Skills

Network Security, Cisco ISE, Active Directory, NetScaler, Load Balancing Tools, Microsoft PKI, IT Security Strategy, Applications Security