Tata Communications Redefines Connectivity with Innovation and IntelligenceDriving the next level of intelligence powered by Cloud, Mobility, Internet of Things, Collaboration, Security, Media services and Network services, we at Tata Communications are envisaging a New World of Communications
Job Title: Cisco ISE SME (Subject Matter Expert)
Experience: 8–15 Years
Department: Network Security & Infrastructure
We are seeking an experienced Cisco ISE SME to design, implement, support, and optimize Cisco Identity Services Engine (ISE) solutions across enterprise environments. The candidate will be responsible for Network Access Control (NAC), 802.1X authentication, device profiling, posture assessment, guest access, and integration with security platforms to ensure secure network access.
- Design and deploy Cisco ISE solutions for enterprise environments.
- Implement wired, wireless, and VPN authentication using 802.1X.
- Configure TACACS+ administration services for network device access control.
- Design and implement
- Configure guest access, BYOD onboarding, and posture assessment policies.
- Integrate Cisco ISE with Active Directory, LDAP, PKI, and Azure AD.
- Provide L3 support for Cisco ISE infrastructure.
- Troubleshoot authentication, authorization, and accounting (AAA) issues.
- Investigate endpoint profiling and posture compliance issues.
- Resolve certificate-related and EAP authentication problems.
- Perform upgrades, patches, backups, and disaster recovery activities.
- Conduct root cause analysis (RCA) for major incidents.
- Integrate Cisco ISE with:
- Cisco DNA Center
- Cisco Secure Firewall (FMC/FTD)
- Cisco Secure Access
- Cisco SecureX
- Microsoft Active Directory
- MDM solutions (Intune, MobileIron, Workspace ONE)
- Support Zero Trust and NAC initiatives.
- Implement compliance and security policies.
- Monitor ISE health, performance, and capacity.
- Optimize authentication workflows and policy sets.
- Review logs and reports for security incidents.
- Develop automation scripts where applicable.
- Cisco ISE 2.x/3.x Administration and Troubleshooting
- 802.1X Authentication (EAP-TLS, PEAP, EAP-FAST)
- TACACS+, RADIUS, AAA
- TrustSec and SGT
- Device Profiling and Posture Services
- Guest and BYOD Services
- TCP/IP, VLANs, Routing & Switching
- Wireless LAN Controllers (Cisco/Aruba)
- VPN Technologies
- DHCP, DNS, PKI Infrastructure
- NAC Solutions
- Zero Trust Architecture
- Identity and Access Management (IAM)
- Certificate Management
- Cisco Certified Specialist – Security Identity Management Implementation
- CCNP Security
- CCIE Security (Preferred)
- Experience with automation using Python, REST APIs, Ansible
- Knowledge of Cisco DNA Center and SDA (Software Defined Access)
- Strong troubleshooting and analytical skills.
- Experience handling critical incidents and escalations.
- Ability to perform RCA and problem management.
- Excellent stakeholder communication skills.
- Ability to lead technical discussions with vendors and customers.
- Cisco ISE deployment architecture (PAN, MnT, PSN).
- EAP-TLS authentication flow.
- 802.1X wired and wireless authentication troubleshooting.
- TACACS+ device administration.
- TrustSec and SGT implementation.
- ISE certificate management and PKI integration.
- Guest/BYOD onboarding workflows.
- ISE upgrade and migration strategies.
- High Availability and Disaster Recovery.
- Integration with Aruba WLC, Cisco WLC, and Firewalls.
