Network Security Engineer (Cisco ISE)

Numero de Requisicion: 72203

La empresa construida sobre innovaciones.

Únete a nosotros.

Corning es uno de los líderes mundiales en innovación de vidrio, cerámica y ciencia de materiales. Desde las profundidades del océano hasta los confines del espacio, nuestras tecnologías amplían los límites de lo posible.

¿Cómo lo hacemos? Con nuestra gente. Ellos rompen con las limitaciones y expectativas, no una vez en su carrera, sino todos los días. Ayudan a avanzar nuestra empresa y el mundo.

En Corning, hay infinitas posibilidades para tener un impacto. Puedes ayudar a conectar a los desconectados, impulsar el futuro de los automóviles, transformar el entretenimiento en casa y asegurar la entrega de medicamentos que salvan vidas. Y mucho más.

Ven a romper barreras con nosotros.

Nuestro segmento de comunicaciones ópticas acaba de evolucionar de ser un fabricante de fibra óptica y cable, hardware y equipos para convertirse en un proveedor integral de soluciones ópticas líder en la industria, abarcando la industria de comunicaciones más amplia. Este segmento se clasifica en dos grupos de productos principales: red de operador y red empresarial. El grupo de productos de red de portador consta principalmente de productos y soluciones para infraestructuras de comunicaciones de fibra óptica para servicios como comunicaciones de video, datos y voz. El grupo de productos de red empresarial consta principalmente de redes de comunicación por fibra óptica dirigidas a negocios, gobiernos y personas para uso propio.

SCOPE/PURPOSE OF POSITION:

We are seeking an experienced and highly skilled Network Engineer to join our team. In this position, you will be at the forefront of designing, implementing, and optimizing innovative network solutions supporting Corning’s businesses globally. This role requires solid experience with network technologies and network authentication, a proactive mindset and a strong focus on supporting reliable and secure global network. As a Network Engineer, you will support the design, deployment, and maintenance of enterprise-wide Network Access Control solutions. You will work with platforms such as Cisco ISE to enforce secure access policies, integrate with authentication systems, and ensure compliance across diverse environments. Strong experience with automation and API integration is required to support scalable, Infrastructure as Code (IaC)-driven operations. Familiarity with OT or manufacturing environments is a plus.

ROLES AND RESPONSIBILITIES:

• Manage and administer ISE clusters to include design, implementation, and maintenance activities.

• Develop, implement, and support Network Access Controls (NAC) policies for user and device authorization to align with security compliance requirements.

• Development of radius policies for dynamic assignment of VLANs to associated devices or users as required.

• Develop and support radius wireless policies for user/device authentication.

• Support TACACS device manager service for management of enterprise grade devices.

• Work with other network technologies as needed.

• Maintain and update system certificates associated to ISE authentication processes.

• Troubleshoot ISE performance and end user authentication issues.

• Develops network design, documentation, and implementation plans for assigned projects.

• Performs proactive management and auditing of network, including event logs as needed.

• Document work via ServiceNow ticket system.

• Participate in after hours on-call, network maintenance windows and critical response activities.

• Assisting with implementation of new solutions, or upgrades to existing solutions, including communications, preparation of documentation and training.

• Participating in root cause analysis on incidents, helping to drive identification of preventative actions meant to ensure problems don’t recur, and delivering on the tasks within those actions.

EDUCATION REQUIREMENTS 4-year degree or equivalent combination of education and experience

WORK EXPERIENCE

• Experience in the deployment and support of Cisco ISE environments in support of wired/wireless/data network functions/tools/processes in a large enterprise environment.

• Experience supporting large, complex enterprise network systems.

• Experience aligning infrastructure requirements with working in both manufacturing and office environments.

REQUIRED SKILLS

• Fluent in English, with excellent verbal and written communication skills

• Experience as a Cisco ISE Engineer creating design documentation, building ISE rules, policies, implementing ISE solutions across a variety of environments, and serve as a subject matter expert.

• Hands-on experience with automation, Infrastructure as Code (IaC), and API integrations, using tools such as Python and Ansible to streamline NAC deployments and policy enforcement.

• Experience as a systems or infrastructure engineer, working directly with wired and wireless network technologies on an enterprise scale.

• Demonstrated initiative, flexibility, and ability to adapt to changing priorities and work environments.

• Proven ability to build and facilitate relationships at all levels of the organization, both internally and externally.

• Knowledge of application transport and network infrastructure protocols.

• Ability to create accurate network diagrams and documentation for design and planning network communication systems.

• Excellent communications, interpersonal and influencing skills.

• Demonstrated track record of on time delivery within budget; ability to drive projects to successful conclusion using influencing tools.

• Successfully navigate within teams across multiple initiatives, spanning various lines of business, geographic borders, time zones, and cultures.

• Will be required call available for after-hours support and an on-call rotation.

DESIRED SKILLS

• Certified Information Systems Security Professional (CISSP)

• Network certifications such as: Cisco Certified Network Professional (CCNP) or Cisco Certified Design Professional (CCDP) certification

• Knowledge of traffic analysis and performance, and network capacity/tools experience

• Experience with multi-vendor network environments including Juniper Mist, Arista and others to ensure consistent policy enforcement across diverse infrastructure

• Understanding of Agile methodologies and ability to work in Agile-drive environments TRAVEL

• Potential travel of up to 25%, which may include international destinations. During critical projects may be higher.

Nos aseguraremos de realizar ajustes razonables para que las personas con discapacidades puedan participar en el proceso de solicitud de empleo o entrevista, realizar funciones laborales esenciales y recibir otros beneficios y privilegios laborales. Para solicitar una adaptación, contáctenos en [email protected].