L3 Network Engineer - Aruba ClearPass NAC

8-12+ years of networking or security infrastructure experience, including at least 5 years of NAC or identity-services experience. Strong hands-on experience with Aruba ClearPass Policy Manager administration and complex authentication troubleshooting. Deep knowledge of 802.1X, RADIUS, TACACS+, EAP methods, certificates, PKI, Active Directory, LDAP, endpoint profiling, and authorization. Experience with large-scale wired and wireless NAC environments, high availability, upgrades, and security integrations. Working knowledge of routing, switching, wireless, firewalls, DHCP, DNS, APIs, automation, and ITIL processes. Responsibilities Aruba ClearPass NAC - Primary Administer and troubleshoot Aruba ClearPass Policy Manager clusters, nodes, services, policies, roles, enforcement profiles, and network device definitions. Configure and troubleshoot 802.1X, MAC Authentication Bypass, RADIUS, TACACS+, EAP-TLS, PEAP, certificate-based authentication, and authorization flows. Manage endpoint profiling, posture, device categories, custom fingerprints, role mapping, segmentation, and access enforcement. Support ClearPass Guest, Onboard, OnGuard, captive portal, BYOD, sponsor workflows, and certificate lifecycle processes where deployed. Integrate ClearPass with Active Directory, LDAP, PKI, MDM/UEM, SIEM, firewalls, wireless controllers, switches, and ITSM platforms. Troubleshoot authentication failures using Access Tracker, event viewer, RADIUS attributes, endpoint data, certificates, packet captures, and device logs. Plan and execute upgrades, patches, cluster maintenance, backups, restores, migrations, certificate renewals, and disaster-recovery tests. Develop standards, reusable policy designs, APIs, automation, reporting, audit controls, and operational documentation. Operations, Governance & Technical Leadership Own or support P1/P2 major incidents, participate in technical bridge calls, and provide timely stakeholder updates. Execute incident, service request, change, problem, and configuration management activities in line with ITIL practices. Prepare implementation plans, rollback procedures, risk assessments, validation reports, SOPs, and knowledge articles. Engage OEM support and technology vendors for complex defects, software issues, and product escalations. Monitor service health, capacity, availability, performance, and recurring trends; recommend continuous improvement actions. Mentor L1/L2 engineers, conduct technical reviews, and support transitions, audits, projects, and operational readiness. Qualifications Technology Area Preferred Platforms Expected Capability Wireless Aruba, Juniper Mist, Cisco Troubleshoot WLAN authentication, role assignment, guest access, roaming, and controller or cloud integration. LAN Switching Aruba CX, Juniper EX, Cisco Catalyst Support wired 802.1X, MAB, downloadable roles/ACLs, VLAN assignment, and switch-port behavior. Identity / PKI Active Directory, LDAP, CA, certificates Troubleshoot directory lookup, group mapping, EAP certificates, trust chains, revocation, and renewal. Security Integration Palo Alto, firewalls, SIEM Support context sharing, segmentation, security events, syslog, and enforcement integrations. DDI BlueCat, Infoblox, Microsoft Understand DHCP, DNS, IP addressing, endpoint visibility, and profiling dependencies. Automation ClearPass APIs, Python, Ansible Automate device onboarding, policy validation, reporting, backups, and operational workflows.