Back to jobs
tags.new

Cisco Identity Services Engine (ISE) Engineer

Denver, Colorado
Build More Than Just a Career. Build Your Future.

At Vailexa, we’re not just hiring — we’re building thinkers, creators, and future leaders.

We believe in giving people the space to grow, the freedom to think, and the opportunity to create real impact from day one. If you’re someone who wants to learn fast, take ownership, and grow beyond limits, you’ll feel right at home here.

Position Overview: This six-month contract role is based in Denver, Colorado. The engineer will assess, clean up, and upgrade an existing Cisco Identity Services Engine (ISE) environment that supports Wi-Fi authentication. The primary focus is ISE configuration, policy, platform health, and upgrade execution. Wireless engineering experience is helpful but not required.

Responsibilities:

  • Assess the current Cisco ISE deployment, configuration, policies, and operational health.
  • Identify configuration inconsistencies, outdated settings, and opportunities to simplify or improve the environment.
  • Plan and support a Cisco ISE upgrade, including prerequisites, sequencing, change coordination, validation, and rollback planning.
  • Review and maintain authentication and authorization policies, policy sets, identity sources, and related services.
  • Troubleshoot authentication and access issues by using logs and policy results to identify root causes.
  • Coordinate with network, security, and infrastructure teams to understand dependencies and minimize service disruption.
  • Document the existing environment, changes made, test results, and operational recommendations.
  • Support testing of wireless authentication flows and help resolve issues involving ISE and network access infrastructure.

Qualifications:

  • Required: Hands-on experience administering and troubleshooting Cisco ISE in an enterprise environment.
  • Required: Experience with Cisco ISE upgrades, configuration cleanup, or platform maintenance.
  • Required: Working knowledge of network access authentication and authorization, including Remote Authentication Dial-In User Service (RADIUS) and IEEE 802.1X.
  • Required: Ability to analyze authentication failures and communicate findings clearly to technical and nontechnical stakeholders.
  • Required: Experience planning and documenting changes in a production environment.
  • Preferred: Wireless networking experience, such as Cisco Wireless LAN Controller (WLC) configuration, access point operations, or radio frequency (RF) fundamentals.
  • Preferred: Experience troubleshooting end-to-end Wi-Fi authentication involving ISE, wireless controllers, and access points.
  • Preferred: Familiarity with identity integrations such as Microsoft Active Directory or Lightweight Directory Access Protocol (LDAP), certificates, and endpoint profiling.
  • Preferred: Relevant Cisco certifications or equivalent practical experience.

Tools and Technologies:

  • Cisco Identity Services Engine (ISE)
  • RADIUS and IEEE 802.1X
  • Cisco Wireless LAN Controllers and access points
  • Microsoft Active Directory, LDAP, and certificate services
  • Cisco ISE logging, policy results, endpoint profiling, and change documentation tools

 

Vailexa Technology is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected status under applicable law.

 

Ready to take the next step?

If you’re excited about this role and ready to grow with a team that values ambition, ideas, and impact — we’d love to hear from you.

👉 Apply now and start building your journey with Vailexa.

Apply for this job

*

indicates a required field

Resume/CV

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Vailexa ’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...