Network Engineer 3 (Network Security)

Location: Onsite in Suitland, Maryland, United States. The workday must start onsite between 7 AM and 9 AM ET and follow a standard 8-hour schedule.

Company

hirify.global delivers digital services and technology solutions for federal agencies supporting veterans, service members, and civilians, including modernization initiatives involving artificial intelligence and emerging technologies.

What you will do

• Troubleshoot Cisco ISE issues involving RADIUS, TACACS+, 802.1X, device administration, and endpoint authentication.
• Deploy, configure, monitor, upgrade, and maintain Cisco ISE on two clustered Cisco SNS-3715 appliances.
• Support the migration from ForeScout CounterACT by mapping legacy policies, device groups, and access rules into Cisco ISE policy sets.
• Configure Cisco ISE integrations with Cisco 9800 Wireless LAN Controllers, including guest portals, wireless onboarding, and policy-driven access control.
• Integrate Cisco ISE with Active Directory and LDAP for identity lookups, group-based authorization, and directory authentication.
• Monitor security events, perform root-cause analysis, document changes, and mentor junior staff while supporting engineering, operations, and compliance teams.

Requirements

• Senior-level experience designing, configuring, monitoring, and troubleshooting Cisco ISE as a NAC/NAM platform.
• At least 8 years of experience in a large government organization, including 5 years in technical leadership and 4 years implementing and troubleshooting Cisco ISE.
• Experience with RADIUS/TACACS+, wired and wireless 802.1X/EAP, device profiling, posture checks, endpoint compliance, EAP-TLS, PKI, and AAA integrations.
• Experience with ForeScout CounterACT, Cisco SNS-3715 high-availability clusters, Cisco 9800 WLCs, wireless support, Active Directory, and LDAP.
• At least 4 years supporting identity-centric or Zero Trust architectures, including segmentation, certificate management, and endpoint posture controls.
• US citizenship is required. Candidates must be able to work onsite in Suitland, Maryland, and meet public trust clearance eligibility requirements, including at least 3 years of residence in the US during the last 5 years.

Nice to have

• Bachelor’s degree in Information Technology, Cybersecurity, or a related field.
• Cisco CCNP Security, Cisco ISE Specialist, or a similar identity or security certification.

Culture & Benefits

• Medical, dental, and vision insurance with employer contributions.
• 401(k) plan with a 5% employer match and immediate vesting.
• Accrual-based paid time off, 11 paid federal holidays, and one floating holiday.
• Paid parental and maternity leave, disability insurance, life insurance, and AD&D coverage.
• Up to $5,250 per year for tuition and certification reimbursement, plus commuter benefits.
• Inclusive, growth-oriented environment with opportunities for learning, knowledge sharing, and career development.