Mediabistro logo
job logo

N Consulting Limited is hiring: Network Engineer in New Bremen

N Consulting Limited, New Bremen, OH, United States


Role: Network Engineer with WLC and ISE skills
Job Description
Seeking a skilled and experienced Wireless LAN Controller (WLC) Administrator with expertise in Cisco Identity Services Engine (ISE) and Cisco Digital Network Architecture Center (DNAC) to join our dynamic IT infrastructure team. The ideal candidate will have 5-7 years of hands‑on experience in managing and optimizing Wireless LAN Controllers (WLC) and related technologies in large‑scale enterprise environments. Must have expertise in both Cisco and Aruba environments. Responsible for the deployment, configuration, troubleshooting, and maintenance of wireless networking solutions, ensuring seamless connectivity, security, and performance for our enterprise-level network infrastructure.

Key Responsibilities

WLC Configuration and Management

Install, configure, and manage Aruba Wireless LAN Controllers (Aruba 7200 Series, 9000 Series) for both remote and on‑premises locations. Integration of Mobility Controller with Mobility Master.

Install, configure, and manage Cisco Wireless LAN Controllers (Cisco 9800 Series, 3504, 5520, Embedded Wireless Controllers) for both remote and on‑premises locations. Configuration of Central switching (Local) OR Flex Connect mode‑based Deployment.

Deploy and optimize wireless networks to support thousands of users, devices, and high traffic loads.

Ensure integration with other networking equipment and systems (e.g., switches, routers, access points such as Cisco Catalyst 9100 Series, Aruba AP500 Series).

Provide second and third‑level support for wireless network‑related incidents.

Perform troubleshooting and resolve issues related to wireless network connectivity, performance, and security.

Collaborate with security teams to ensure network policies meet corporate compliance standards.

Monitor wireless network security, conduct vulnerability assessments and apply best practices to mitigate risks.

Assist in designing wireless network architecture for new projects and expansions.

Conduct site surveys and RF planning to ensure optimal coverage and performance.

Optimize the wireless network, including load balancing, roaming, and client performance improvements.

Plan, test, and execute firmware and software upgrades for WLCs and APs.

Ensure minimal downtime and compatibility with all other network components during upgrades.

Maintain up‑to‑date documentation of all configurations, network topologies, and change requests.

Generate and present regular reports on network performance, usage statistics, and any incidents.

Work closely with other IT teams (e.g., network, security, and operations) to implement solutions and resolve issues.

Proven track record of managing large‑scale enterprise wireless networks with hardware and software.

Solid understanding of networking protocols, including DHCP, DNS, SNMP, QoS, VLANs, and routing protocols.

In‑depth knowledge of wireless technologies such as 802.11ac/ax, WPA2/WPA3, 802.1X authentication, RADIUS, TACACS.

Experience with network security tools and technologies, including VPNs, firewalls, and intrusion detection systems.

Experience with Guest wireless, including pre‑ and post‑authentication using ISE Guest self‑registration & Sponsor portal, along with configuration of Guest redirect ACL and roles.

Design, configure, and manage Cisco ISE solutions for network access control, authentication, and security.

Integrate Cisco ISE with various network devices and security platforms, including switches, routers, and firewalls.

Implement 802.1X authentication and other security policies for wired, wireless, and VPN networks.

Troubleshoot and resolve issues related to device provisioning, authentication, and network access.

Maintain and update Cisco ISE software versions, including patches and hotfixes.

Ensure compliance with internal and external security standards.

Work closely with cross‑functional teams to integrate network solutions and maintain robust network security.

Perform regular network performance assessments and propose improvements.

Collaborate with other network engineers and IT teams to support overall infrastructure projects.

Cisco Identity Services Engine (ISE)

Minimum of 3‑5 years of experience in network engineering, with a focus on Cisco ISE.

Proven experience in configuring, maintaining, and troubleshooting Cisco ISE for secure network access.

Solid understanding of networking concepts (TCP/IP, routing, switching, VLANs, VPNs, etc.).

Deep knowledge of Cisco ISE policies, device profiling, posture assessments, and guest access.

Expertise in network security and access control methods such as 802.1X, MAC Authentication Bypass (MAB), and RADIUS.

Familiarity with Cisco SD-Access and Cisco SD-WAN architectures.

Guest access Deployment by using Cisco ISE captive & Sponsor Portal.

Deep knowledge of Policy sets & Authorization rule in ISE deployment.

#J-18808-Ljbffr

In Summary: The ideal candidate will have 5-7 years of hands‑on experience in managing and optimizing Wireless LAN Controllers (WLC) and related technologies in large‑scale enterprise environments . Must have expertise in both Cisco and Aruba environments . Responsible for the deployment, configuration, troubleshooting, and maintenance of wireless networking solutions .

En Español: El candidato ideal tendrá 5-7 años de experiencia práctica en la gestión y optimización de los controladores LAN inalámbricos (WLC) y tecnologías relacionadas en entornos empresariales a gran escala. Debe tener experiencia tanto en el entorno Cisco como en Aruba. Responsable del despliegue, configuración, resolución de problemas y mantenimiento de las soluciones de redes inalámpricas (ISE), garantizando una conectividad perfecta, seguridad y rendimiento para nuestra infraestructura empresarial. Garantizar la integración con otros equipos y sistemas de red (por ejemplo, interruptores, enrutadores, puntos de acceso como Cisco Catalyst 9100 Series, Aruba AP500 Series). Proporcionar soporte de segundo y tercer nivel para incidentes relacionados con redes inalámbricas. Realizar soluciones a problemas y resolver cuestiones relacionadas con conectividad, rendimiento y seguridad de las redes sin cables. Colaborar con los equipos de seguridad para garantizar que las políticas de red cumplan con los estándares de conformidad corporativas. Monitorear la seguridad de la red sin cable, realizar evaluaciones de vulnerabilidades y aplicar mejores prácticas para mitigar riesgos. Ayudar en el diseño de arquitectura de red inalámica para nuevos proyectos y expansiones. Llevar a cabo encuestas del sitio y planificación de RF para asegurar una cobertura y un rendimiento óptimos. Optimizar la red wireless, incluido el equilibrio, roaming y mejoras del desempeño del cliente. Planificar, probar y ejecutar firmware y actualizaciones de software para WLCs y APs. Conocimiento sólido de los protocolos de red, incluidos DHCP, DNS, SNMP, QoS, VLAN y protocolo de enrutamiento. Un profundo conocimiento de las tecnologías inalámbricas como 802.11ac/ax, WPA2/WPA3, 802.1X autenticación, RADIUS, TACACS. Experiencia con herramientas y tecnologías de seguridad de la red, incluyendo VPNs, cortafuegos y sistemas de detección de intrusiones. experiencia con Guest wireless, incluyendo pre- y post-authentificación mediante el portal de autoinscripción e patrocinador del Cisco Guest, junto a la configuración de redes ACL y roles para invitados. Diseñar, configurar y gestionar soluciones de Cisco ISE para el control de acceso a la Red, la autenticación y la seguridad. Integra ISE con varios dispositivos y plataformas de seguridad, incluidas auténticas, routeres y cerraduras. Implementar políticas de seguridad transversal y otros equipos de trabajo internos que se centran en mejorar el cumplimiento de los estándares de seguridad y otras normas de seguridad. Experiencia probada en configurar, mantener y solucionar problemas de Cisco ISE para un acceso seguro a la red. Comprensión sólida de los conceptos de redes (TCP/IP, encaminamiento, conmutación, VLANs, VPNs, etc.). Conocimiento profundo de las políticas de Cisco Ise, perfilamiento de dispositivos, evaluaciones de postura y acceso al huésped.