Senior Network Engineer, Network Access Security

Rockwell Automation

. Design, deploy, and operate 802.1X and MAB authentication for wired and wireless access across corporate and manufacturing environments.

Posted 11/3/2026full-timeUnited StatesSenior💰 $119,360 - $179,040 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in 802.1X and MAB authentication, Cisco ISE management, and network segmentation to enhance security and operational efficiency. Proficient in troubleshooting complex access issues and implementing Zero Trust strategies across diverse environments.

Highest-signal resume keywords

802.1X And MAB AuthenticationCisco ISE ManagementRADIUS And TACACS+ AdministrationNetwork Segmentation And VLANsForescout Administration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Network Access ControlCertificate Lifecycle ManagementTroubleshooting And Analytical SkillsAutomation Using PythonCisco Routing And Switching

Soft Skills

Independent Problem SolvingCollaboration With Cross-Functional Teams

Tools & Technologies

ForescoutCisco Wireless LAN ControllerMicrosoft AzurePalo Alto Networks Firewall

Certifications & Qualifications

CCNPCCNP SecurityCisco ISE Focused Certification

Industry Keywords

Zero Trust ModelOT And Industrial NetworksEAP MethodsPKI And CertificatesSecurity Operations

Tech Stack

Tools & technologies

AnsibleAzureCloudPythonSwitching

About the role

Key responsibilities & impact

Design, deploy, and operate 802.1X and MAB authentication for wired and wireless access across corporate and manufacturing environments.
Build and tune Cisco ISE policy sets, authentication and authorization rules, posture, profiling, dynamic VLAN, and downloadable ACL assignment.
Troubleshoot complex access failures end to end, from supplicant and switchport through RADIUS to the ISE policy decision, including OT and industrial endpoints.
Own deployment, upgrades, patching, and certificate lifecycle for the distributed ISE estate across regions.
Manage certificate and PKI dependencies for ISE and RADIUS, including EAP, DTLS, and administration certificates.
Respond to ISE and NAC security advisories and drive timely, low-risk remediation.
Operate and extend Forescout for device discovery, classification, and policy enforcement, including ACL writing enablement.
Keep access policy aligned with an accurate, current picture of network devices.
Design and implement network segmentation using VLANs, access control lists, and group-based policy to limit lateral movement and contain risk.
Help define and advance the Zero Trust roadmap for network access, turning strategy into deployed, measurable control.
Manage RADIUS and TACACS+ for authentication and device administration, and support Cisco access-layer switching.
Partner with firewall, application delivery, security operations, and regional network teams.
Create and maintain documentation, runbooks, and standard configurations, providing second-point coverage for the program.
Participate in change management, maintenance windows, and escalations, including outside standard business hours when needed.

Requirements

What you’ll need

Bachelor's Degree in relevant field.
Legal authorization to work in the US is required; employment visa sponsorship is not available now or in the future.
Typically requires a minimum of 8 years of related experience.
Bachelor's degree in Computer Science, Engineering, Information Technology, or equivalent experience.
Current or previously held Cisco networking certification, such as CCNP or CCNP Security.
Extensive, hands-on practical experience administering Forescout, including design, creation, and enforcement of network access policy.
Deep, demonstrable expertise in 802.1X and MAB for wired and wireless access, RADIUS, and common EAP methods.
Practical experience with Cisco Identity Services Engine (ISE) for device administration (TACACS+), including deployment, upgrades, and certificate lifecycle in a large, distributed enterprise.
Strong Cisco routing and switching foundation, particularly the campus and access layer.
Solid understanding of network segmentation, VLANs, and access control lists, and how they serve a Zero Trust model.
Working knowledge of certificates and PKI as they apply to EAP, RADIUS, and device trust.
Strong troubleshooting and analytical skills, with the ability to work independently and own a regional share of a global program.
Cisco ISE or security specialization, such as a CCNP Security or an ISE focused certification.
Experience with Cisco TrustSec, Security Group Tags, and pxGrid integrations.
Experience securing OT and industrial or manufacturing networks, where endpoints cannot always run a supplicant.
Palo Alto Networks firewall familiarity, enough to partner cleanly on segmentation and policy.
Automation experience using Python, Ansible, or REST APIs to scale NAC and access operations.
Experience with Cisco wireless, including the 9800 wireless LAN controller.
Experience deploying or integrating in Microsoft Azure cloud environments.

Benefits

Comp & perks

Health Insurance including Medical, Dental and Vision
401k
Paid Time off
Parental and Caregiver Leave
Flexible Work Schedule where you will work with your manager to enjoy a work schedule that can be flexible with your personal life.
Annual target bonus of 8% of base salary