{"id":2577839,"url":"https://alion.io/job/jcs-solutions-principal-network-access-control-nac-engineer-jcs-solutions-llc","title":"Principal Network Access Control (NAC) Engineer - JCS Solutions LLC","company":{"id":3854787,"name":"JCS Solutions","domain":"jcssolutions.com","url":"https://alion.io/company/jcs-solutions","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"JazzHR","truth_index":null},"role":"Networking","role_family":"Networking","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Fort Meade, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":104000,"max":149000,"currency":"USD","period":"year","gross":null,"usd_annual":149000},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Ansible","optional":false},{"name":"Configuration Management","optional":false},{"name":"DHCP","optional":false},{"name":"Discord","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PKI","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Slack","optional":false},{"name":"VPN","optional":false}],"status":"live","first_seen_at":"2026-10-15T00:45:05Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-21T17:54:28Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!\nJob Summary\nJCS Solutions is seeking a Principal Network Access Control (NAC) Engineer to support the modernization and integration of a large-scale, geographically distributed enterprise wireless environment supporting a Department of Defense customer. This role serves as a senior technical engineer responsible for wireless infrastructure modernization, Aruba Central implementation, controller migration, network resiliency improvements, wireless security enhancements, and enterprise network access control integration.\nThe successful candidate will provide technical leadership across Aruba wireless technologies, Aruba Central, Aruba ClearPass, Cisco ISE, enterprise authentication services, wireless security platforms, and monitoring integrations. This position will work closely with cloud, network, cybersecurity, identity management, and operations teams to deliver secure, scalable, and highly available wireless services.\nThis role requires a hands-on engineer capable of designing, implementing, testing, documenting, and transitioning enterprise wireless solutions while providing technical guidance and leadership across engineering teams.\nLocation: Ft. Meade, MD\nClearance: Secret\nSalary: $104,000.00 - $149,000.00\nCertification: Active DoD 8140/8570 IAT Level II certification.\nWhat’s in it for you:\nJoin a premier technology firm specializing in innovative solutions. \nBe part of a collaborative, inclusive, and innovative work culture. \nEnjoy tremendous growth potential in a high-performing team environment. \nA robust benefits package: Health, dental, and vision insurance \nLife insurance \nShort-and-long term disability \nPaid time off (PTO) \n401k retirement plan with employer match \nAnnual Professional Development Reimbursement Program \nAnd more! \n\nWhat you will do:\nWireless Architecture and Controller Migration\nDesign, engineer, and implement the migration of existing Aruba wireless controllers to a centralized cloud-hosted infrastructure.\nDeploy and configure Aruba Central for centralized wireless management, configuration standardization, monitoring, and operational visibility.\nDevelop controller migration strategies, implementation procedures, validation plans, and rollback processes.\nStandardize NTP configurations across wireless controllers, access points, and supporting network infrastructure.\nEvaluate and establish wireless deployment standards, including bridge versus tunnel mode and campus versus remote architectures.\nDevelop standardized configurations and deployment playbooks for geographically distributed sites.\nCoordinate cloud infrastructure integration, including connectivity, routing, security requirements, and availability.\nWireless High Availability and Network Resiliency\nDesign and implement Layer 2 and Layer 3 redundancy to improve wireless availability and service continuity.\nConfigure and validate controller failover, preemption, and recovery to preferred controllers following service restoration.\nImplement and troubleshoot VRRP, virtual IP addressing, and controller high-availability configurations.\nEvaluate and optimize DHCP, GRE tunnels, routing, and wireless traffic forwarding across centralized and distributed environments.\nDevelop and execute failover and recovery testing to validate wireless resiliency.\nTroubleshoot complex controller, routing, and wireless connectivity issues.\nWireless Security and Network Access Control\nDesign and implement enterprise wireless security standards, including WPA3, Wireless Intrusion Detection Systems (WIDS), and identity-based access controls.\nConfigure wireless security policies through Aruba Central and validate deployment to controllers and access points.\nEvaluate hardware compatibility and develop migration strategies for WPA3 adoption, including transition-mode considerations.\nStandardize wireless configurations, including 5 GHz operation, authentication, and security settings.\nIntegrate wireless infrastructure with Cisco ISE, Aruba ClearPass, and enterprise identity services.\nConfigure and troubleshoot 802.1X, RADIUS, EAP-TLS, certificate-based authentication, and wireless access policies.\nCoordinate identity-based policy integration with Microsoft Entra ID, VPN infrastructure, and firewall enforcement.\nMonitoring and Enterprise Integration\nIntegrate Aruba Central with ScienceLogic SL1 to support wireless monitoring, alerting, device discovery, and performance visibility.\nCoordinate with monitoring engineers to establish required APIs, monitoring policies, and operational dashboards.\nValidate controller status, access point availability, authentication health, and wireless performance monitoring.\nSupport integration with enterprise DNS, DHCP, NTP, routing, and security infrastructure.\nIdentify opportunities to automate wireless configuration, monitoring, and troubleshooting.\nGuest Wireless and Security Integration\nDevelop secure guest wireless architecture, including network segmentation and Internet connectivity options.\nEvaluate guest authentication methods, including temporary credentials, PPSK, and IPSK.\nSupport guest wireless security requirements, implementation planning, and authorization documentation.\nCoordinate technical security assessments, configuration validation, and required infrastructure approvals.\nTechnical Leadership and Documentation\nServe as a senior technical subject matter expert for Aruba wireless infrastructure and centralized wireless management.\nProvide technical direction, mentoring, and engineering guidance to network engineering personnel.\nLead technical design reviews, implementation planning, integration testing, and troubleshooting activities.\nIdentify technical risks, dependencies, and operational impacts associated with wireless modernization.\nEstablish repeatable engineering standards and implementation procedures for deployment teams.\nSupport production migration, validation, and transition to operations.\nDevelop and maintain wireless architecture and cloud integration diagrams.\nDevelop Aruba Central and controller configuration standards.\nCreate controller migration procedures, failover designs, test plans, validation procedures, SOPs, migration playbooks, and operations transition documentation.\nWhat you will bring:Bachelor's degree with 12+ years of relevant experience, or Master's degree with 10+ years of relevant experience.\nAdditional relevant experience, education, or training may be considered in lieu of a degree.\nU.S. Citizenship required.\nActive DoD Secret security clearance.\nActive DoD 8140/8570 IAT Level II certification.\nSignificant hands-on experience engineering, implementing, and supporting enterprise Aruba wireless infrastructure, including controllers, access points, and centralized management platforms.\nExperience with Aruba Central, including configuration management, controller integration, and enterprise wireless deployments.\nStrong knowledge of enterprise wireless networking, including 802.11 standards, RF fundamentals, WLAN architecture, VLANs, routing, and switching.\nExperience implementing and troubleshooting wireless controller redundancy, high availability, failover, and network resiliency.\nExperience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms.\nExperience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms.\nExperience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments.\nStrong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues.\nStrong written and verbal communication skills.\nExperience providing technical guidance and developing engineering documentation.\nMust meet applicable cybersecurity workforce qualification requirements for the assigned position.\n How you will wow us:Experience migrating Aruba wireless controllers to cloud-hosted or centrally managed environments.\nExperience with Aruba Central On-Premises or cloud-managed Aruba deployments.\nExperience implementing VRRP, controller preemption, and Layer 2/Layer 3 failover architectures.\nExperience with bridge-mode, tunnel-mode, campus, and remote wireless architectures.\nExperience integrating Cisco ISE and Aruba ClearPass with enterprise wireless infrastructure.\nExperience integrating wireless authentication with Microsoft Entra ID, Active Directory, and PKI.\nExperience implementing WPA3, WIDS/WIPS, PPSK/IPSK, and wireless security standards.\nExperience integrating Aruba Central with ScienceLogic SL1 or comparable monitoring platforms.\nExperience designing secure guest wireless networks with isolated Internet connectivity.\nExperience with wireless RF optimization, 5 GHz deployments, and high-density environments.\nExperience with Python, REST APIs, Ansible, or similar network automation technologies.\nExperience supporting security authorization activities, configuration hardening, and compliance assessments.\nExperience supporting geographically distributed enterprise networks.\nJCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.JCS is both a Great Place to Work and a Top Places to Work certified company.\nOur employees embody our core values, and we are looking for others who do too!\nCustomer Experience: Strive for excellence and delight our clients \nInnovation: Embrace creative thinking to enable continual growth and powerful solutions \nAccountability: Take ownership of and pride in our actions and service delivery \nInspire: Be inspired to be your best self and have fun in the process \nIntegrity: Do the right thing, the right way, every time! \nStewardship: The careful and responsible management of something entrusted to our care. \nAt JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $104,000.00 - $149,000.00Commitment to Non-Discrimination\nAll qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.\nNOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.","description_format":"text","description_chars":11107,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["401k plan","Life insurance","Professional development","Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","IT Help Desk & Service Desk","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-15T00:45:05Z"}],"visa":[],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":0.945,"age_days":6,"expected_fill_days":11,"reasons":["conf:0","velocity","win:mid"],"computed_at":"2026-10-21T05:46:15Z"},"pay":{"stated_usd_annual":149000,"is_top_pay":false},"html_url":"https://alion.io/job/jcs-solutions-principal-network-access-control-nac-engineer-jcs-solutions-llc","json_url":"https://alion.io/job/jcs-solutions-principal-network-access-control-nac-engineer-jcs-solutions-llc.json","meta":{"generated_at":"2026-10-21T20:47:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":29605,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3854787},"rest":"https://alion.io/mcp/rest/get_company?id=3854787"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjcs-solutions-principal-network-access-control-nac-engineer-jcs-solutions-llc"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjcs-solutions-principal-network-access-control-nac-engineer-jcs-solutions-llc"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjcs-solutions-principal-network-access-control-nac-engineer-jcs-solutions-llc"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jcs-solutions-principal-network-access-control-nac-engineer-jcs-solutions-llc\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjcs-solutions-principal-network-access-control-nac-engineer-jcs-solutions-llc"}]}