Senior Network Engineer- NAC Focused (ClearPass Implementation)

Traversa Solutions•Richardson, TX

1d•Onsite

About The Position

The Senior Network Engineer, NAC, leads HPE Aruba ClearPass implementations from discovery through enforcement and handoff, while also carrying the associated LAN and WLAN work. The role designs NAC policy models with customers, builds and deploys them, transitions environments from monitor mode to enforcement while keeping users online, and leads other engineers on projects. Candidates must have prior experience designing and deploying ClearPass in production for customers and be able to take technical project leadership from the outset. This is an in-person role based in Traversa Solutions’ Richardson, Texas office, with 20–30% travel, including overnight travel, and after-hours cutover support. The position reports to the Director of Service Delivery. Traversa is a network professional services firm that designs, implements, and supports enterprise LAN, WLAN, SD-WAN, and network security for resellers, manufacturers, and their end customers. Its practices include HPE Aruba Networking, Juniper, Fortinet, Cisco, and Arista, serving higher education, K-12, energy, industrial/OT, and mid-market enterprise customers.

Requirements

At least 7 years of enterprise networking experience.
At least 3 years of hands-on ClearPass design and implementation for external customers.
Have led at least three production ClearPass deployments through 802.1X enforcement.
At least 5 years with a value-added reseller, systems integrator, managed services provider, or professional services firm, consulting directly with customers on requirements gathering, design, and implementation.
Active HPE Aruba Networking Certified Professional, Network Security (ACP-NS) certification.
Strong LAN and WLAN skills, including VLANs, routing, switching, RADIUS, and enterprise wireless design and deployment.
Working knowledge of PKI and certificate lifecycle for device authentication.
Ability to explain design decisions to technical and non-technical stakeholders.
Ability to travel 20–30%, including overnight travel, and support after-hours cutovers.
Authorized to work in the United States; visa sponsorship is not available.

Nice To Haves

Experience with HPE Aruba Networking Central NAC, Juniper Mist Access Assurance, Cisco ISE, or FortiNAC.
ClearPass deployments in VMware, Hyper-V, AWS, or Azure.
Experience with ClearPass in higher education, K-12, or industrial/OT environments.
CCNP Enterprise, CWNA, or another professional-level networking certification.
Firewall experience with Fortinet, Palo Alto Networks, Cisco, or Check Point.
Bachelor’s degree in a technical discipline, or equivalent experience.

Responsibilities

Lead discovery and design workshops and produce NAC policy designs covering identity sources, roles, enforcement profiles, and phased rollout plans.
Design and deploy ClearPass clusters, including publisher and subscriber placement, virtual appliance sizing, high availability, and licensing.
Build wired and wireless 802.1X authentication using EAP-TLS and PEAP-MSCHAPv2, as well as MAC authentication, guest and captive portal access, and device onboarding.
Integrate certificate-based authentication with customer PKI, including SCEP and MDM platforms such as Microsoft Intune and Jamf.
Integrate ClearPass with Active Directory, LDAP, Microsoft Entra ID, firewalls, and SIEM platforms for identity and context sharing.
Configure device profiling and onboarding for IoT and OT devices.
Configure TACACS+ device administration.
Configure HPE Aruba Networking AOS-CX switching and wireless (AOS 8, AOS 10, and Aruba Central), and third-party switches, as RADIUS clients; implement user-based segmentation where in scope.
Move deployments from monitor mode to enforcement in planned phases, with rollback at each stage.
Troubleshoot authentication failures using Access Tracker, endpoint logs, and packet captures.
Plan and execute ClearPass upgrades and platform migrations.
Act as technical lead on assigned projects, managing technical risk, reviewing configurations, and mentoring other engineers.
Support pre-sales with scoping, level-of-effort input, and design review.
Deliver knowledge transfer sessions and as-built documentation.
Maintain customer documentation in SharePoint and record time and project notes in Odoo daily.