Network Engineer III

OP is partnering with a globally renowned leader in media, entertainment, and consumer experiences to hire a Network Engineer who identifies, designs, implements, and supports enterprise Network Access Control (NAC) capabilities with a primary focus on Aruba ClearPass Policy Manager. This role enables secure, identity-based access for wired, wireless, VPN, guest, BYOD, and managed endpoints by translating business and security requirements into scalable ClearPass policies, integrations, and operational standards. The role partners closely with network engineering, cybersecurity, operations, outsourced suppliers, and vendors to ensure access control designs align with enterprise architecture, security standards, and business needs. Responsibilities: - Design, configure, and support Aruba ClearPass Policy Manager services for enterprise NAC use cases across wired, wireless, VPN, guest, BYOD, and managed device access. - Develop and maintain authentication, authorization, and accounting policies using 802.1X, MAC Authentication Bypass, RADIUS, TACACS+, role mapping, enforcement profiles, and dynamic segmentation principles. - Integrate ClearPass with enterprise identity and security platforms, including Active Directory/LDAP, PKI/certificate services, MDM/UEM solutions, SIEM/SOC tooling, and network infrastructure platforms. - Create and maintain ClearPass policy matrices, HLD/LLD documentation, implementation plans, test plans, method of procedures, rollback plans, and operational runbooks. - Troubleshoot complex authentication, authorization, posture, profiling, certificate, and network access issues across ClearPass, switching, wireless, VPN, directory, and endpoint environments. - Support ClearPass Guest, Onboard, OnGuard, device profiling, endpoint posture assessment, and sponsor-based guest access workflows where required. - Partner with cybersecurity and architecture teams to enforce segmentation, least-privilege access, compliance requirements, and secure access standards. - Collaborate with outsourced suppliers and vendors to communicate technical requirements, validate proposed designs, review changes, and ensure solutions meet enterprise standards. - Monitor ClearPass system health, capacity, licensing, performance, and high-availability posture; support upgrades, patching, certificate renewals, and lifecycle management activities. - Provide proactive project and operational status updates to Business Units and stakeholders, including risks, issues, dependencies, and remediation plans. - Evaluate emerging NAC, identity-based access, wireless, LAN, and zero trust capabilities; recommend fit-for-purpose improvements that strengthen security and operational efficiency. Qualifications: - 5+ years of network engineering, network operations, or network security experience. - Hands-on experience with Aruba ClearPass Policy Manager in a global, high-availability, enterprise environment. - Ability to optimize and reduce technical debt of enforcement profiles, role mappings, and service rules. - Strong understanding of NAC, 802.1X, MAB, RADIUS, TACACS+, role-based access, and policy enforcement. - Experience integrating ClearPass with identity, certificate, endpoint, security, and network platforms. - Ability to troubleshoot network and device authentication, certificate, profiling, posture, and access issues. - Working knowledge of LAN, WLAN, routing, switching, VLANs, DHCP, DNS, and IP addressing. - Able to create clear technical documentation, implementation plans, test plans, and support procedures. - Strong communication, collaboration, ownership, and problem-solving skills. Must Haves (Years of Experience, languages, programs, tools, etc.): - 5+ years of network engineering or network security experience. - 2+ years of hands-on Aruba ClearPass Policy Manager experience. - 2+ years administering ClearPass in a heterogeneous infrastructure, including Aruba/HPE, Cisco, Juniper, Palo Alto, etc.. - Experience with NAC policy design for wired, wireless, VPN, guest, BYOD, IoT, and managed endpoints. - Knowledge of 802.1X, MAB, RADIUS, TACACS+, AD/LDAP, PKI/certificates, VLANs, and role-based access. - Ability to troubleshoot ClearPass access issues using logs and standard network tools. - CCNA, Aruba ClearPass certification, or equivalent enterprise NAC experience. Nice To Haves: - Aruba ClearPass certification or formal ClearPass training. - Experience with ClearPass REST API related to configuration changes or polling for health and operational metrics. - Familiarity with zero trust, segmentation, identity-based access, or SASE/SD-WAN concepts. - Experience with firewalls, endpoint security, CMDB, ITSM, SIEM/SOAR, or automation tools. - Experience in a Net/SecDevOps team environment. - CCNP, Aruba Switching, Aruba Mobility, security certifications, or equivalent advanced experience. Education: - A degree in a technical-related field, appropriate certifications, or equivalent work experience. Why Join Us? At our organization, technology powers the magic. As part of our team, you ll help build and maintain the systems that support our iconic brands and global operations. We offer a collaborative work environment, opportunities for growth, and a culture that celebrates diversity, creativity, and innovation.