Senior Network Engineer- NAC Focused (ClearPass Implementation)

TRAVERSA SOLUTIONS, INC.

Senior Network Engineer – NAC Focused (ClearPass Implementation)

Reports to: Director of Service Delivery  ·  In person, Richardson, TX  ·  Full-time, Exempt  ·  Travel 20–30%

About Traversa

Traversa Solutions is a network professional services firm based in Richardson, TX. We design, implement and support enterprise LAN, WLAN, SD-WAN and network security for value-added resellers, manufacturers and their end customers. HPE Aruba Networking is one of our core practices, alongside Juniper, Fortinet, Cisco and Arista, for customers in higher education, K-12, energy, industrial/OT and mid-market enterprise.

About the Role

The Senior Network Engineer, NAC, leads HPE Aruba ClearPass implementations from discovery through enforcement and handoff, and carries the LAN and WLAN work that goes with them. You will design the policy model with the customer, build it, move it from monitor mode to enforcement without taking users offline, and lead other engineers on the project.

This is not a role for learning ClearPass on the job. We need an engineer who has already designed and deployed ClearPass in production for customers, and who can take the technical lead on a project from the first week.

Key Responsibilities

• Lead discovery and design workshops, and produce the NAC policy design: identity sources, roles, enforcement profiles and phased rollout plan
• Design and deploy ClearPass clusters: publisher and subscriber placement, virtual appliance sizing, high availability and licensing
• Build 802.1X authentication for wired and wireless (EAP-TLS, PEAP-MSCHAPv2), MAC authentication, guest and captive portal, and device onboarding
• Integrate certificate-based authentication with the customer's PKI, including SCEP and MDM platforms such as Microsoft Intune and Jamf
• Integrate ClearPass with Active Directory, LDAP and Microsoft Entra ID, and with firewalls and SIEM platforms for identity and context sharing
• Configure device profiling and onboarding for IoT and OT devices
• Configure TACACS+ device administration
• Configure HPE Aruba Networking AOS-CX switching and wireless (AOS 8, AOS 10 and Aruba Central), and third-party switches, as RADIUS clients; implement user-based segmentation where in scope
• Move deployments from monitor mode to enforcement in planned phases, with rollback at each stage
• Troubleshoot authentication failures using Access Tracker, endpoint logs and packet captures
• Plan and execute ClearPass upgrades and platform migrations
• Act as technical lead on assigned projects: manage technical risk, review configurations and mentor other engineers
• Support pre-sales with scoping, level-of-effort input and design review
• Deliver knowledge transfer sessions and as-built documentation
• Maintain customer documentation in SharePoint and record time and project notes in Odoo daily

Required Qualifications

• 7 or more years of enterprise networking experience
• 3 or more years of hands-on ClearPass design and implementation for external customers
• Led at least three production ClearPass deployments through to 802.1X enforcement
• 5 or more years with a value-added reseller, systems integrator, managed services provider or professional services firm, consulting directly with customers: requirements gathering, design and implementation
• Active HPE Aruba Networking Certified Professional, Network Security (ACP-NS) certification.
• Strong LAN and WLAN skills: VLANs, routing, switching, RADIUS, enterprise wireless design and deployment
• Working knowledge of PKI and certificate lifecycle for device authentication
• Ability to explain design decisions to both technical and non-technical stakeholders
• Able to travel 20 to 30 percent, including overnight travel, and to support after-hours cutovers
• Authorized to work in the United States. Visa sponsorship is not available for this role

Preferred Qualifications

• Experience with HPE Aruba Networking Central NAC, Juniper Mist Access Assurance, Cisco ISE or FortiNAC
• ClearPass deployments in VMware, Hyper-V, AWS or Azure
• Experience with ClearPass in higher education, K-12 or industrial/OT environments
• CCNP Enterprise, CWNA or another professional-level networking certification
• Firewall experience (Fortinet, Palo Alto Networks, Cisco or Check Point)
• Bachelor's degree in a technical discipline, or equivalent experience

Core Values

We hire for alignment with Traversa's core values:

• Communication
• Ownership
• Drive for Excellence and Growth
• Problem Solving and Innovation

Benefits

• 401(k) with up to 3 percent employer match
• Health, dental and vision insurance
• Health savings account with $600 annual employer contribution
• Flexible spending account
• Life insurance
• Paid time off
• Employee assistance program
• Company-paid training and certification exams

Work Location

This is an in-person role based in our Richardson, TX office (75081).

Traversa does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non-merit factor.