Senior Secure Access Engineer – Network Products

Bupa

. Design, implement, configure and support Cisco ISE infrastructure and associated Network Access Control services .

Posted 10/7/2026full-timeSalford • United KingdomSenior💰 £60,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing, implementing, and supporting Cisco Identity Services Engine (ISE) within enterprise environments, with a strong focus on Network Access Control, Zero Trust principles, and identity-based access management. Proficient in troubleshooting complex authentication and network access issues while maintaining high-quality technical documentation and operational procedures.

Highest-signal resume keywords

Cisco Identity Services Engine (ISE) AdministrationNetwork Access Control (NAC)802.1X AuthenticationRADIUS and TACACS+Device Profiling and Posture Assessment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cisco ISE Administration802.1X AuthenticationRADIUSTACACS+Device ProfilingPosture AssessmentNetwork SegmentationVLANsActive Directory IntegrationTroubleshooting

Soft Skills

Stakeholder ManagementCommunication SkillsRoot-Cause Analysis

Tools & Technologies

Microsoft Active DirectoryCisco Catalyst CentreSIEM PlatformsMDM/UEM PlatformsCisco DuoPowerShellPythonREST APIsCloud Platforms (Azure, AWS, GCP)

Certifications & Qualifications

CCNPCisco Certified Specialist SecurityCisco ISE Administration ExperienceCisco SDAccess

Industry Keywords

Zero Trust ArchitectureNetwork Segmentation TechnologiesIdentity-Based Access ManagementGuest Access ServicesCompliance Validation

Tech Stack

Tools & technologies

AWSAzureCloudDNSGoogle Cloud PlatformPythonSwitching

About the role

Key responsibilities & impact

Design, implement, configure and support Cisco ISE infrastructure and associated Network Access Control services
Develop and maintain AAA services using RADIUS and TACACS+
Design, implement and manage 802.1X authentication across wired, wireless and remote access environments
Create, maintain and optimise Cisco ISE policy sets, authorisation rules, endpoint groups, profiling policies and posture policies
Implement and manage device profiling, posture assessment and compliance validation
Design and maintain network segmentation policies using VLAN assignments, downloadable ACLs, SGTs and TrustSec
Support guest access services, self-registration portals and third-party onboarding workflows
Monitor and maintain Cisco ISE health, performance, resilience and capacity, including patching, upgrades and lifecycle management
Troubleshoot complex authentication, authorisation and network access issues with Network, EUC, Security and Infrastructure teams
Maintain technical documentation, operational procedures, support runbooks and service introduction artefacts
Lead testing, validation and deployment of Cisco ISE enhancements, upgrades and network integrations
Collaborate with product managers, architects and engineering teams on roadmap initiatives and continuous service improvements
Translate business network access requirements into scalable and secure policy models
Review emerging capabilities and industry best practices to improve security, operational efficiency and user experience

Requirements

What you’ll need

Proven experience designing, implementing and supporting Cisco Identity Services Engine (ISE) within a large enterprise environment
Strong understanding of Network Access Control (NAC), Zero Trust principles and identity-based access management
Hands-on experience with Cisco ISE administration, 802.1X authentication, RADIUS and TACACS+, device profiling, posture assessment, guest access services, certificate-based authentication and endpoint compliance enforcement
Strong networking background across routing and switching, LAN/WAN technologies, wireless networking, VLANs, network segmentation, DNS, DHCP and Active Directory integration
Experience integrating Cisco ISE with Microsoft Active Directory, Entra ID, PKI/certificate services, Cisco Catalyst Centre, SIEM platforms, MDM/UEM platforms and Cisco Duo
Experience supporting BAU operations and project-based delivery within complex enterprise environments
Strong troubleshooting and root-cause analysis skills across authentication, network connectivity and endpoint access issues
Experience working within Agile product teams and contributing to sprint-based delivery models
Ability to produce and maintain high-quality technical documentation, standards, operational procedures and support models
Excellent stakeholder management and communication skills with technical and non-technical audiences
Experience with PowerShell, Python and REST APIs would be advantageous
CCNP, Cisco Certified Specialist Security Certifications, Cisco ISE Administration Experience, Cisco SDAccess, Microsoft Entra ID, PKI Infrastructure, Zero Trust Architecture, network segmentation technologies and cloud platforms (Azure, AWS, GCP) would be beneficial

Benefits

Comp & perks

From £60,000+ depending on experience
10% yearly bonus
25 days holiday, increasing through length of service, with option to buy or sell
Bupa health insurance as a benefit in kind
Enhanced pension plan and life insurance
Onsite gyms or local discounts where no onsite gym available
Various other benefits and online discounts
Hybrid working with 2 days in office
Flexible working
Family friendly benefits
Viva global wellbeing programme covering mental, physical, financial, social and environmental wellbeing