Network Access Control (NAC) Engineer

About the Role

Job Title: Network Access Control (NAC) Engineer – Aruba ClearPass / 802.1X
Location: Work From Home (WFH) or Pune (Hybrid – Work from Client Office)
Experience: 2–4 Years
Working Hours: UK Time Zone
Notice Period: Immediate Joiners Only

Mandatory Technical Skill: Aruba NAC / ClearPass

Role Overview

We are looking for an experienced Network Access Control (NAC) Engineer with hands-on expertise in Aruba ClearPass and 802.1X authentication to join our network security team.

The ideal candidate should have practical experience in Network Access Control implementation, EAP-TLS authentication, certificate-based authentication, RADIUS configuration, endpoint profiling and role-based access enforcement.

The primary focus of this role will be implementing and managing Aruba ClearPass Policy Manager, deploying 802.1X authentication across wired and wireless networks, configuring NAC policies, integrating with Active Directory and PKI infrastructure, and troubleshooting authentication and authorization issues.

Candidates should possess a good understanding of network security, VLANs, RADIUS, certificate management, network segmentation and enterprise network infrastructure.

The role involves working with Tata Communications as the end client and requires candidates who can work in UK business hours, either remotely or from the Pune client office in a hybrid working model.

Immediate joiners with relevant Aruba ClearPass and NAC experience are strictly required.

Key Responsibilities

1. Network Access Control (NAC) and 802.1X Authentication

• Design, implement and support 802.1X authentication across wired and wireless networks.

• Configure EAP-TLS authentication for machine and user authentication.

• Implement certificate-based network authentication.

• Configure Windows supplicants through Group Policy (GPO), Intune or MDM.

• Plan and execute phased NAC deployments, including monitor mode, low-impact mode and closed-mode enforcement.

• Implement MAC Authentication Bypass (MAB) for devices that do not support 802.1X.

• Troubleshoot authentication and authorization failures.

2. Aruba ClearPass Policy Management

• Configure and maintain Aruba ClearPass Policy Manager.

• Create and manage ClearPass services, authentication sources and authentication methods.

• Configure role mapping, enforcement policies and enforcement profiles.

• Integrate ClearPass with Active Directory and LDAP.

• Implement dynamic VLAN assignment, downloadable roles, ACLs and RADIUS Change of Authorization (CoA).

• Manage ClearPass certificates, trust lists, clustering, backups and upgrades.

• Use Access Tracker, logs and reports to troubleshoot authentication issues.

3. Endpoint Profiling and MAC Authentication Bypass (MAB)

• Configure endpoint profiling using Aruba ClearPass.

• Identify and classify endpoints based on device type, operating system and device attributes.

• Implement MAB for printers, IP phones, cameras, IoT and other non-802.1X devices.

• Configure endpoint repositories and device classification policies.

• Implement endpoint authorization and exception management.

• Troubleshoot MAC spoofing, profiling conflicts and unauthorized device access.

• Support migration from monitor mode to strict NAC enforcement.

4. NAC Policy Creation and Enforcement

• Translate security requirements into Aruba ClearPass policies.

• Configure service rules, role mapping and enforcement policies.

• Implement policy conditions based on certificates, AD groups, endpoint profiles and network location.

• Configure role-based access control and least-privilege network access.

• Implement VLAN assignment, Aruba user roles, Cisco downloadable ACLs and other enforcement mechanisms.

• Perform policy testing, validation and peer reviews before production deployment.

• Maintain policy documentation and device-class enforcement records.

5. PKI and Certificate Management

• Integrate Aruba ClearPass with existing Public Key Infrastructure (PKI).

• Work with Microsoft Active Directory Certificate Services (AD CS).

• Configure and validate RADIUS/EAP server certificates.

• Understand certificate chains, templates, EKUs and SANs.

• Configure certificate revocation checking through OCSP and CRL.

• Support certificate enrollment and renewal processes.

• Work with SCEP and certificate auto-enrollment mechanisms.

6. Network Infrastructure Integration

• Configure switches and wireless controllers for 802.1X authentication.

• Implement RADIUS authentication, accounting and CoA.

• Work with Aruba CX switches, Aruba wireless infrastructure and Cisco Catalyst switches.

• Coordinate with network teams for VLAN design, port configurations and network changes.

• Support wired and wireless NAC deployments.

• Troubleshoot network connectivity and authentication-related issues.

7. Troubleshooting and Technical Support

• Provide technical support for Aruba ClearPass and NAC-related issues.

• Analyse Access Tracker logs and authentication failures.

• Perform root-cause analysis of authentication and authorization problems.

• Investigate certificate validation, RADIUS communication and endpoint profiling issues.

• Support defect resolution and policy optimization.

• Coordinate with network, security, desktop and infrastructure teams.

• Provide third-level technical support when required.

8. Documentation and Compliance

• Prepare High-Level Designs (HLDs) and Low-Level Designs (LLDs).

• Develop implementation guides, test plans and operational runbooks.

• Maintain NAC configuration and policy documentation.

• Ensure proper testing and validation before production changes.

• Support network segmentation and Zero Trust security initiatives.

• Follow relevant security standards such as ISO 27001 and applicable network security guidelines.

• Support knowledge transfer and operational handover.

Required Skills & Experience

• 2–4 years of relevant experience in Network Security, Network Engineering or NAC implementation.

• Mandatory hands-on experience with Aruba ClearPass Policy Manager.

• Practical experience with Network Access Control (NAC) solutions.

• Strong understanding of 802.1X authentication and EAP-TLS.

• Experience with RADIUS authentication, accounting and Change of Authorization (CoA).

• Knowledge of PEAP, EAP-TTLS and EAPOL protocols.

• Experience configuring ClearPass services, role mapping and enforcement policies.

• Understanding of Active Directory and LDAP integration.

• Knowledge of certificate-based authentication and PKI.

• Understanding of certificate chains, EKUs, SANs, OCSP and CRL.

• Experience with Windows supplicant configuration through GPO and/or Intune.

• Understanding of wired and wireless network authentication.

• Knowledge of Aruba switches, Aruba wireless infrastructure and/or Cisco Catalyst.

• Good understanding of VLANs, routing, firewalls and network segmentation.

• Experience with endpoint profiling and MAC Authentication Bypass (MAB).

• Strong troubleshooting, analytical and problem-solving skills.

• Good communication and documentation skills.

• Ability to work in UK business hours.

Desirable Skills & Experience

• Aruba certifications such as ACCP (ClearPass Professional) or ACCX.

• Exposure to Cisco Identity Services Engine (ISE).

• Experience with ClearPass Onboard, OnGuard and Guest.

• Knowledge of endpoint profiling and device classification.

• Experience with Microsoft Intune, Jamf and other MDM/EMM platforms.

• Knowledge of SCEP and NDES certificate distribution.

• Experience with Python, REST APIs or Ansible for network automation.

• Exposure to SIEM tools such as Splunk and Microsoft Sentinel.

• Knowledge of OT/Industrial network security and IEC 62443.

• Certifications such as CISSP, CompTIA Security+ or equivalent.

Behaviours and Competencies

• Strong analytical and troubleshooting capabilities.

• Ability to investigate issues using logs and technical evidence.

• Good communication and coordination skills.

• Ability to work with cross-functional network and security teams.

• Understanding of production network environments and operational continuity.

• Strong documentation and knowledge-sharing skills.

• Ability to work independently and deliver tasks within agreed timelines.

Conclusion – Ideal Candidate Profile

The ideal candidate will be a Network Access Control (NAC) Engineer with 2–4 years of experience in network security and hands-on expertise in Aruba ClearPass, 802.1X authentication, EAP-TLS and RADIUS.

The candidate must have practical experience in configuring Aruba ClearPass services, authentication sources, role mapping, enforcement policies, endpoint profiling and MAC Authentication Bypass (MAB).

A good understanding of PKI, certificate management, Active Directory integration, VLANs, wired/wireless networking and network troubleshooting is essential.

Candidates with exposure to Cisco networking, Intune, Python automation, NAC policy enforcement and network segmentation will be highly preferred.

Immediate joiners with mandatory Aruba ClearPass / NAC experience are strictly required.

Additional Requirements

• Qualification: Relevant technical degree or equivalent experience.

• Experience: 2–4 Years.

• Mandatory Technical Skills: Aruba ClearPass, NAC, 802.1X, EAP-TLS, RADIUS and Network Security.

• Additional Skills: PKI, AD/LDAP, MAB, Endpoint Profiling and VLANs.

• Location: Work From Home or Pune (Hybrid – Client Office).

• Priority: Candidates with hands-on Aruba ClearPass and production NAC implementation experience.