Lead Infrastructure Engineer - Network Access Control

Job responsibilities

• Lead the design, deployment, and management of NAC solutions with a focus on Forescout and EyeSegment platforms.
• Implement and maintain 802.1x authentication across wired and wireless networks.
• Develop and maintain automation scripts and playbooks using Ansible to streamline NAC operations and network device configurations.
• Collaborate with network, security, and operations teams to integrate NAC with broader security and infrastructure initiatives.
• Monitor, troubleshoot, and optimize NAC systems to ensure high availability, performance, and compliance.
• Conduct regular security assessments and audits of network access controls and recommend improvements.
• Document architecture, processes, and procedures for NAC deployments and operations.
• Mentor and guide junior engineers in NAC best practices and technologies.
• Stay current with industry trends and emerging technologies in NAC, network security, and automation.
• Uses enterprise-authorized AI capabilities within the work environment to accelerate infrastructure analysis and design documentation, validating outputs and handling operational data according to sensitivity and security requirements.
• Applies reuse-first, AI-assisted practices within delivery and automation routines to identify recurring issues and validate remediation options, ensuring changes are traceable/auditable and aligned to resiliency and security expectations.

Required qualifications, capabilities, and skills

• Formal training or certification in infrastructure disciplines/concepts, with 5+ years of applied experience
• Relevant year of network infrastructure engineering experience, with a focus on Network Access Control (NAC)
• Strong knowledge of 802.1X authentication protocols and enterprise implementation
• Proficiency with automation tools—especially Ansible (developing playbooks and automating network/security tasks)—and experience working with XML, JSON, and REST APIs
• Solid understanding of network infrastructure fundamentals (switching, routing, VLANs, firewalls, wireless, etc.)
• Strong Linux administration skills (installation, scripting, troubleshooting)
• Familiarity with network security best practices and compliance requirements
• Excellent problem-solving, communication, and documentation skills; ability to work independently and lead cross-functional teams; experience with VMware ESXi infrastructure and Splunk Query Language (SPL)
• Demonstrated experience using enterprise-authorized AI capabilities to support infrastructure engineering workflows, with strong validation habits and awareness of data sensitivity
• Ability to review and validate AI-assisted recommendations before implementation; escalate when uncertain; and ensure outcomes align with resiliency, security, and auditability expectations

• Bachelor’s in Computer Engineering/CS (or equivalent experience).
• Expertise with Forescout and EyeSegment platforms (deployment, configuration, and management); experience with other NAC solutions (e.g., Cisco ISE, Aruba ClearPass) is a plus
• Risk/controls exposure and tooling familiarity (e.g., Archer or similar GRC platforms).
• Relevant certifications (network/security or risk fundamentals) and continuous learning in risk and resilience.