The successful candidate will support a Local Area Network (LAN) segmentation project, particularly involving Cisco Identity Services Engine (ISE) to logically segment and secure Campus IoT devices with 802.1X/MAB authentication.
Requirements:
- Network Design and Architecture: Understanding of network design principles and the ability to architect a segmented LAN.
- Cisco ISE Expertise: Proficiency in deploying, configuring, and managing Cisco ISE. This includes understanding of policy enforcement, profiling services, guest access, and BYOD provisioning.
- Network Security: Knowledge of network security principles and practices, including firewalls, intrusion detection systems, anti-virus software, and data encryption.
- Understanding of VLANs: Ability to design and implement Virtual Local Area Networks (VLANs) for segmenting a network.
- Routing and Switching: Strong understanding of routing protocols (e.g., OSPF, EIGRP, BGP) and switching concepts. Experience with Layer 2/3 switches and routers.
- IP Addressing and Subnetting: Proficiency in IP addressing, subnetting, and routing concepts for creating segmented networks.
- Knowledge of Access Control Lists (ACLs): Experience in creating and managing ACLs to control network traffic within a segmented network.
- Troubleshooting: Ability to diagnose and resolve network issues quickly and efficiently.
- Project Management: Skills in planning, executing, and overseeing projects to ensure they are completed in a timely fashion and within budget.
- Communication Skill: Ability to clearly explain technical concepts to non-technical stakeholders and work effectively with team members.
- Knowledge of Network Standards and Protocols: Familiarity with network standards such as IEEE 802.1Q and protocols like IP, TCP, UDP, ICMP, SNMP, etc.
- Certifications: Having network-related certifications like CCNA, CCNP, or CCIE can be beneficial.
