Job Description
Role:
Cisco Client Engineer Location:
Oakland, CA (Hybrid - 4 to 5 days in month) Duration:
6+ months (possible extension) Overview:
The client is seeking a highly experienced Cisco Client Engineer to design, implement, and maintain a robust enterprise Network Access Control (NAC) environment. This is a senior, hands-on technical role requiring deep expertise across wired, wireless, remote access, guest, BYOD, and device administration use cases. The ideal candidate brings architectural thinking combined with day-to-day operational excellence and strong troubleshooting skills. Key Responsibilities:
Architecture & Implementation Design and implement Cisco Client architecture for enterprise NAC across wired, wireless, remote access, guest, BYOD, and device administration environments Build and manage policy sets for endpoint profiling, posture assessment, guest access, sponsor portals, BYOD onboarding, and certificate-based access Policy Development Develop and maintain authentication and authorization policies using 802.1X, MAB, RADIUS, and TACACS+ Create and refine policy sets aligned to security standards and operational requirements Integration Integrate Cisco Client with identity sources including Active Directory, LDAP, OCSP, and AWS PKI Connect Client to MDM/EMM platforms: Intune, Jamf Pro, AirWatch, and Addigy Configure integrations with VPN platforms, firewalls, and endpoint security tools Troubleshooting & Operations Troubleshoot complex authentication, authorization, posture, and network access issues Resolve issues across switches, wireless controllers, firewalls, and VPN platforms Maintain documentation, support audits, and ensure policy compliance Required Skills & Experience:
Experience 5+ years of hands-on experience in network security or network engineering Direct, production-level experience with Cisco Client is mandatory Technical Skills Cisco Client:
Architecture, policy sets, profiling, posture, guest, BYOD, sponsor portals Protocols:
802.1X, MAB, RADIUS, TACACS+ Identity Integration:
Active Directory, LDAP, OCSP, AWS PKI MDM/EMM
Intune, Jamf Pro, AirWatch, Addigy Network Platforms:
Switches, wireless controllers, VPN platforms, firewalls Certificate-based access and PKI concepts Certifications (Required or Strongly Preferred) CCNP Security Cisco Certified Specialist - Security Identity Management Implementation CCIE Security (a strong differentiator)
