{"id":3711731,"url":"https://alion.io/job/rockwell-automation-senior-network-engineer-network-access-security","title":"Senior Network Engineer, Network Access Security","company":{"id":12129,"name":"Rockwell Automation","domain":"rockwellautomation.com","url":"https://alion.io/company/rockwell-automation","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":81,"ghost_share":0.049,"stale_share":0.432,"repost_share":0.099,"time_to_fill_p50_days":28,"computed_at":"2026-11-09T06:03:00Z"}},"role":"Networking","role_family":"Networking","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Eden Prairie, United States","Milwaukee, United States","United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":119360,"max":179040,"currency":"USD","period":"year","gross":null,"usd_annual":179040},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Azure","optional":false},{"name":"PKI","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"VLAN","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-03T23:31:05Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-09T05:50:06Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Rockwell Automation is a global technology leader focused on helping the world’s manufacturers be more productive, sustainable, and agile. With more than 28,000 employees who make the world better every day, we know we have something special. Behind our customers - amazing companies that help feed the world, provide life-saving medicine on a global scale, and focus on clean water and green mobility - our people are energized problem solvers that take pride in how the work we do changes the world for the better.\nWe welcome all makers, forward thinkers, and problem solvers who are looking for a place to do their best work. And if that’s you we would love to have you join us!\nJob Description\nAs a Senior Network Engineer, Network Access Security, you will join our enterprise network and security engineering team. In this role you will help own the design, security, and reliability of how every user and device gets onto our global network. The work spans network access control, identity based authentication, and network segmentation. The majority of our network access policy is built and enforced in Forescout, with Cisco Identity Services Engine (ISE) handling device administration, across our AMER, EMEA, and APAC regions.\nThis is our Zero Trust program for the network. You will partner directly with our senior network access engineer as a peer, sharing a program that today runs across three regions and hundreds of sites. You will take real ownership of a share of that estate rather than shadowing someone else's, and you will help move the program from reactive lifecycle work toward a deliberate segmentation and Zero Trust build.\nThis is a hands on engineering role for someone who has lived inside network access policy and RADIUS logs, knows why a supplicant is failing 802.1X, and can tighten access without taking a plant or an office offline.\nYou will report to the IT Manager, Network and Security Engineering, and will work Hybrid in any of RA office based in Milwaukee or Mequon, WI OR Mayfield Heights, OH OR Chelmsford, MA or Eden Prairie, MN.\nPrimary Responsibilities\nNetwork access control and 802.1X (primary focus of the role):\nDesign, deploy, and operate 802.1X and MAB authentication for wired and wireless access across the global estate, for both corporate and manufacturing environments. \nBuild and tune Cisco ISE policy sets, authentication and authorization rules, posture, profiling, and dynamic VLAN and downloadable ACL assignment. \nTroubleshoot complex access failures end to end, from the supplicant and switchport through RADIUS to the ISE policy decision, including hard to place devices such as OT and industrial endpoints. \nCisco ISE platform engineering and lifecycle:\nOwn deployment, upgrades, patching, and certificate lifecycle for the distributed ISE estate, including policy and monitoring nodes across regions. \nManage the certificate and PKI dependencies that ISE and RADIUS rely on, including EAP, DTLS, and administration certificates. \nRespond to ISE and NAC security advisories and drive timely, low risk remediation. \nForescout and device visibility:\nOperate and extend Forescout for device discovery, classification, and policy enforcement, including ACL writing enablement as sites are brought under control. \nKeep access policy aligned with an accurate, current picture of what is actually on the network. \nNetwork segmentation and Zero Trust:\nDesign and implement network segmentation using VLANs, access control lists, and group based policy to limit lateral movement and contain risk. \nHelp define and advance the Zero Trust roadmap for network access, turning strategy into deployed, measurable control. \nAAA, access layer, and operations:\nManage RADIUS and TACACS+ for authentication and device administration, and support the Cisco access layer switching that underpins it. \nPartner with the firewall, application delivery, security operations, and regional network teams to deliver access control as a coherent service. \nCreate and maintain documentation, runbooks, and standard configurations, and provide a genuine second point of coverage for a program that is currently single threaded. \nParticipate in change management and support maintenance windows and escalations, including outside standard business hours when needed. \nThe Essentials - You Will Have:\nBachelor's Degree in relevant field.\nLegal authorization to work in the US is required. We will not sponsor individuals for employment visas, now or in the future, for this job opening.\nThe Preferred - You Might Also Have:\nTypically requires a minimum of 8 years of related experience.\nBachelor's degree in Computer Science, Engineering, Information Technology, or equivalent experience. \nCurrent or previously held Cisco networking certification, such as CCNP or CCNP Security. \nExtensive, hands on practical experience administering Forescout, including the design, creation, and enforcement of network access policy. The majority of our network access policy lives in Forescout, so deep Forescout expertise is the critical requirement for this role. \nDeep, demonstrable expertise in 802.1X and MAB for wired and wireless access, RADIUS, and common EAP methods. This is a core requirement for the role. \nPractical experience with Cisco Identity Services Engine (ISE) for device administration (TACACS+), including deployment, upgrades, and certificate lifecycle in a large, distributed enterprise. \nStrong Cisco routing and switching foundation, particularly the campus and access layer. \nSolid understanding of network segmentation, VLANs, and access control lists, and how they serve a Zero Trust model. \nWorking knowledge of certificates and PKI as they apply to EAP, RADIUS, and device trust. \nStrong troubleshooting and analytical skills, with the ability to work independently and own a regional share of a global program. \nCisco ISE or security specialization, such as a CCNP Security or an ISE focused certification. \nExperience with Cisco TrustSec, Security Group Tags, and pxGrid integrations. \nExperience securing OT and industrial or manufacturing networks, where endpoints cannot always run a supplicant. \nPalo Alto Networks firewall familiarity, enough to partner cleanly on segmentation and policy. \nAutomation experience using Python, Ansible, or REST APIs to scale NAC and access operations. \nExperience with Cisco wireless, including the 9800 wireless LAN controller. \nExperience deploying or integrating in Microsoft Azure cloud environments. \nWhat We Offer:\nHealth Insurance including Medical, Dental and Vision\n401k\nPaid Time off\nParental and Caregiver Leave\nFlexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life.\nTo learn more about our benefits package, please visit at www. raquickfind.com.\nFor this role, the Base Salary Compensation is from $119,360.00 - $179,040.00 USD Annual with an annual target bonus of 8% of base salary. Actual pay will be based on factors such as skills, knowledge, education, and experience.\nAt Rockwell Automation we are dedicated to building a diverse, inclusive and authentic workplace, so if you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right person for this or other roles.\nThis position is part of a job family. Experience will be the determining factor for position level and compensation.\nWe are an Equal Opportunity Employer including disability and veterans.\nIf you are an individual with a disability and you need assistance or a reasonable accommodation during the application process, please contact our services team at +1 (844) 404-7247.\nRockwell Automation’s hybrid policy aligns that employees are expected to work at a Rockwell location at least Mondays, Tuesdays, and Thursdays unless they have a business obligation out of the office.","description_format":"text","description_chars":7956,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Flexible schedule","Health insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Artificial Intelligence","Manufacturing","Motors, Drives & Motion Control","Manufacturing & Industrial Software"],"lifecycle":[{"event":"open","at":"2026-11-03T23:31:05Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 81 · green card filings: 14","filings_12m":81,"filings_prev_12m":62,"green_card_filings_12m":14,"median_offered_wage_usd":146763,"route":null,"cap_exempt":false,"checked_at":"2026-11-09T07:32:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":3}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":5,"expected_fill_days":28,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-11-09T06:03:00Z"},"pay":{"stated_usd_annual":179040,"is_top_pay":true},"html_url":"https://alion.io/job/rockwell-automation-senior-network-engineer-network-access-security","json_url":"https://alion.io/job/rockwell-automation-senior-network-engineer-network-access-security.json","meta":{"generated_at":"2026-11-09T14:33:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19990,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":12129},"rest":"https://alion.io/mcp/rest/get_company?id=12129"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frockwell-automation-senior-network-engineer-network-access-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frockwell-automation-senior-network-engineer-network-access-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frockwell-automation-senior-network-engineer-network-access-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rockwell-automation-senior-network-engineer-network-access-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frockwell-automation-senior-network-engineer-network-access-security"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3711731}},{"tool":"search_jobs","arguments":{"company":"rockwellautomation.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3711731},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}