# L3 Technical Engineer – Aruba ClearPass Network Access Control

**Company**: Hewlett Packard Enterprise
**Location**: Mumbai, Maharashtra
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Technology

**Apply**: https://hpe.wd5.myworkdayjobs.com/en-US/Jobsathpe/job/Mumbai-Maharashtra-India/L3-Technical-Engineer---Aruba-ClearPass-Network-Access-Control_1201127-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_a813d9cb-a70

## Description

We are seeking an experienced L3 Technical Engineer to work with Aruba ClearPass Network Access Control. As a technical expert, you will design, deploy, and operate Aruba ClearPass Policy Manager (CPPM) and architect and support HA/DR ClearPass clusters.

Key responsibilities include:

- Designing, deploying, and operating Aruba ClearPass Policy Manager (CPPM)

- Configuring services, authentication sources, authorization, and enforcement policies

- Performing deep troubleshooting using Access Tracker, Event Viewer, and system logs

- Implementing and troubleshooting 802.1X, EAP-TLS, PEAP, EAP-TTLS, MAC Authentication Bypass (MAB), and RADIUS, TACACS+, and CoA (RFC 3576)

- Integrating NAC with access switches (Aruba/Cisco/Juniper) and configuring dynamic VLAN assignment and downloadable user roles (DUR)

- Troubleshooting switch-side issues such as re-auth loops and fail-open/fail-close scenarios

- Configuring and supporting ClearPass OnGuard posture checks and validating endpoint compliance

- Implementing certificate-based authentication (EAP-TLS) and integrating with Microsoft AD, LDAP, and AD CS (PKI)

- Troubleshooting certificate lifecycle issues (expiry, trust chain, CRL/OCSP)

- Acting as L3 escalation point for NAC incidents and performing root cause analysis (RCA) for authentication and posture issues

- Integrating ClearPass with SIEM (Splunk/QRadar) and ITSM tools (BMC/ServiceNow)

- Planning and executing ClearPass upgrades and patching

To be successful in this role, you will need:

- Expert-level knowledge of Aruba ClearPass Policy Manager

- Experience with NAC technologies: 802.1X, RADIUS, TACACS+, CoA

- Knowledge of switch-based NAC enforcement and endpoint posture (OnGuard)

- Experience with certificate-based authentication (EAP-TLS) and Windows AD, LDAP, DNS, NTP

- Strong troubleshooting and log analysis skills

Preferred skills include:

- Experience in a banking/BFSI environment

- SIEM/SOC integration experience

- REST API usage and automation

- SD-WAN, VPN, or remote-access NAC integration

## Skills

### Required
- Aruba ClearPass Policy Manager
- NAC technologies: 802.1X, RADIUS, TACACS+, CoA
- Switch-based NAC enforcement
- Endpoint posture (OnGuard)
- Certificate-based authentication (EAP-TLS)
- Windows AD, LDAP, DNS, NTP

### Nice to have
- Banking / BFSI environment exposure
- SIEM / SOC integration experience
- REST API usage and automation
- SD-WAN, VPN, or remote-access NAC integration

---

Source: [Apply at hpe.wd5.myworkdayjobs.com](https://hpe.wd5.myworkdayjobs.com/en-US/Jobsathpe/job/Mumbai-Maharashtra-India/L3-Technical-Engineer---Aruba-ClearPass-Network-Access-Control_1201127-2?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)