Security Solutions Specialist

We are seeking an experienced Security Solutions Specialist to run day-to-day operations for our Network Access Control (NAC) and network security environment, with hands-on expertise across FortiNAC, HPE Aruba ClearPass, and Cisco ISE, alongside routing, switching, and firewall platforms from Fortinet, Palo Alto Networks, Cisco, Arista, and HPE Aruba. This is an operations-focused role: monitoring, maintaining, troubleshooting, and continuously tuning secure network access, identity-based control, and next-generation firewall infrastructure across a multi-vendor enterprise environment.

Key Responsibilities

Network Access Control Operations (FortiNAC / NAC Platforms)

• Operate and maintain FortiNAC (or equivalent NAC platform) for day-to-day endpoint visibility, profiling, posture assessment, and access enforcement.
• Monitor access control policies for wired, wireless, OT, and IoT devices, and respond promptly to policy violations or access anomalies.
• Maintain integrations between the NAC platform and switches, wireless controllers, NGFWs, and identity sources; troubleshoot integration failures.
• Run and tune automated endpoint compliance checks, NAC profiling, and remediation workflows; investigate exceptions.
• Operate and maintain RADIUS authentication services for wired and wireless access, including policy sets, authentication/authorization rules, and certificate-based (EAP-TLS) or credential-based access methods.
• Manage TACACS+ for device administration AAA, including per-command authorization, privilege levels, and shell profiles for network and security device access.
• Monitor AAA (Authentication, Authorization, and Accounting) logs and sessions across NAC, RADIUS, and TACACS+ platforms, investigating authentication failures and access anomalies.
• Onboard, classify, and manage diverse device types (corporate endpoints, BYOD, printers, IP phones, cameras, OT/IoT devices) through profiling, fingerprinting, and appropriate access policies.
• Handle day-to-day device lifecycle activities including registration, quarantine, remediation, and offboarding of non-compliant or rogue devices.
• Troubleshoot RADIUS/TACACS+ integration issues with switches, wireless controllers, VPN concentrators, and network devices to maintain uninterrupted authentication services.

Network & Firewall Operations (NGFW)

• Perform day-to-day operation, monitoring, and health checks of routing, switching, and firewall environments.
• Operate and maintain Next-Generation Firewalls (NGFW), including IPS, Web Filtering, Application Control, Antivirus, and NAC integration, ensuring rules and signatures stay current.
• Triage, troubleshoot, and resolve network and firewall-related incidents and performance issues, escalating and driving root-cause analysis as needed.
• Monitor traffic segmentation and policy enforcement across the infrastructure, flagging and remediating drift or misconfiguration.
• Support change management for firewall and network configuration changes, including testing and rollback procedures.
• Operate and troubleshoot MPLS-based WAN infrastructure, including PE/CE configurations, label switching paths, and service provider handoffs.
• Monitor and troubleshoot BGP routing (eBGP/iBGP), including route advertisements, route-maps, prefix filtering, and path selection issues affecting traffic flow.
• Manage VLAN segmentation, trunking, and inter-VLAN routing across switching infrastructure, resolving misconfigurations and broadcast/traffic issues.
• Apply strong TCP/IP fundamentals (addressing, subnetting, routing tables, NAT, QoS) to diagnose and resolve day-to-day connectivity and performance issues.
• Support and troubleshoot EVPN-VXLAN fabrics, including MAC/IP learning, VTEP connectivity, and overlay-underlay integration issues in data center environments.
• Perform packet captures and traffic analysis to isolate routing, switching, and firewall-related faults across MPLS, BGP, VLAN, and EVPN layers.

General Operational Responsibilities

• Serve as a day-to-day operational point of contact for security and network access issues, working closely with network, infrastructure, SOC, and compliance teams.
• Participate in on-call or shift-based support rotations as required to maintain operational uptime and incident response.
• Perform advanced troubleshooting, performance monitoring, and capacity/health checks across network and security layers.
• Maintain accurate operational documentation, configuration records, run-books, and standard operating procedures.
• Track recurring incidents and operational issues to identify trends and drive continuous improvement.
• Ensure all day-to-day operations align with organizational policies, SLAs, and industry best practices.

Required Skills & Qualifications

• Bachelor’s degree in Information Technology or a related field.
• Proven hands-on operational experience with FortiNAC or equivalent NAC platforms (e.g., HPE Aruba ClearPass, Cisco ISE).
• Strong operational expertise in routing, switching, and firewall technologies across Fortinet, Palo Alto Networks, Cisco, Arista, and HPE Aruba platforms.
• Hands-on experience operating and monitoring NGFW capabilities, including IPS, Web Filtering, Application Control, Antivirus, NAC profiling, and posturing.
• Strong understanding of network and security fundamentals (TCP/IP, VLANs, routing, switching).
• Experience monitoring and maintaining integrations between Fortinet solutions and third-party tools (SIEM, IAM, firewalls).
• Ability to analyze logs, alerts, and security events to identify and resolve operational issues.
• Strong troubleshooting, analytical, and incident-response skills in a live production environment.

Preferred Qualifications

• Fortinet certifications (NSE 4, NSE 5, NSE 7 or equivalent).
• Cisco certifications (CCNA, CCNP, CCIE optional, or equivalent).
• Experience supporting operations in enterprise, financial, ISP, or service provider environments.
• Knowledge of compliance frameworks (ISO 27001, GDPR, PCI-DSS).
• Automation or scripting experience for operational tasks (e.g., monitoring, reporting, remediation) is a plus.

Soft Skills

• Strong communication and documentation abilities.
• Ability to work independently and collaboratively under operational pressure.
• Proactive, detail-oriented, and security-focused.