Description
We are seeking an experienced L3 Technical Engineer to work with Aruba ClearPass Network Access Control. As a technical expert, you will design, deploy, and operate Aruba ClearPass Policy Manager (CPPM) and architect and support HA/DR ClearPass clusters.
Key responsibilities include:
- Designing, deploying, and operating Aruba ClearPass Policy Manager (CPPM)
- Configuring services, authentication sources, authorization, and enforcement policies
- Performing deep troubleshooting using Access Tracker, Event Viewer, and system logs
- Implementing and troubleshooting 802.1X, EAP-TLS, PEAP, EAP-TTLS, MAC Authentication Bypass (MAB), and RADIUS, TACACS+, and CoA (RFC 3576)
- Integrating NAC with access switches (Aruba/Cisco/Juniper) and configuring dynamic VLAN assignment and downloadable user roles (DUR)
- Troubleshooting switch-side issues such as re-auth loops and fail-open/fail-close scenarios
- Configuring and supporting ClearPass OnGuard posture checks and validating endpoint compliance
- Implementing certificate-based authentication (EAP-TLS) and integrating with Microsoft AD, LDAP, and AD CS (PKI)
- Troubleshooting certificate lifecycle issues (expiry, trust chain, CRL/OCSP)
- Acting as L3 escalation point for NAC incidents and performing root cause analysis (RCA) for authentication and posture issues
- Integrating ClearPass with SIEM (Splunk/QRadar) and ITSM tools (BMC/ServiceNow)
- Planning and executing ClearPass upgrades and patching
To be successful in this role, you will need:
- Expert-level knowledge of Aruba ClearPass Policy Manager
- Experience with NAC technologies: 802.1X, RADIUS, TACACS+, CoA
- Knowledge of switch-based NAC enforcement and endpoint posture (OnGuard)
- Experience with certificate-based authentication (EAP-TLS) and Windows AD, LDAP, DNS, NTP
- Strong troubleshooting and log analysis skills
Preferred skills include:
- Experience in a banking/BFSI environment
- SIEM/SOC integration experience
- REST API usage and automation
- SD-WAN, VPN, or remote-access NAC integration