Network Access Control EngineerThe Department of Administration's Office of Technology & Information Services (OTIS) is seeking a Network Access Control (NAC) Engineer to join the team.OTISoversees the state’s federated model for implementing, enhancing, and protecting information technology (IT) resources and the utilization of IT shared services across agencies. In this role under the Network Integration team, you will be instrumental in fortifying the security framework that underpins our agency network. Your expertise will safeguard sensitive organizational data by designing and enforcing robust access control mechanisms. This role directly contributes to the reliability and resilience of our IT infrastructure by implementing network access controls leveraging NAC technologies and zero-trust models. You will ultimately ensure that only authorized users and devices gain access to our network, thereby minimizing risks of breaches and enhancing overall organizational trust. Your work will have a significant impact on our ability to maintain compliance with government security standards and regulations, enhancing our reputation as a secure and innovative company.If you are a network professional with a keen ability to dive deep in customer conversations, ultimately providing sound technical solutions, this position is for you!This position is onsite in Columbia, SC.Responsibilities of the NAC Engineer:- Develop and maintain comprehensive NAC policies, including guest access and compliance checks for BYOD and IoT devices.
- Analyze network traffic, device behavior, and security postures to identify risks and prevent unauthorized access.
- Deploy, configure, and maintain NAC solutions (e.g., Cisco ISE, Meraki Secure Access Manager, Aruba ClearPass, MS NPS Server or equivalent).
- Using industry best practices, install, configure and troubleshoot network devices and their operating systems.
- Perform peer review of network configuration changes to be made by other Network Engineers.
- Troubleshoot switching and routing issues across the network. Support network connectivity for cloud and DR networks.
- Respond to network security incidents and troubleshoot connectivity issues related to security policies.
- Create detailed documentation, network diagrams, and change histories for all security configurations.
- Monitor network performance and utilization with available tools to ensure that the network remains healthy and functional.
- Utilize test environments, when possible, to evaluate and test new network configurations or hardware so that the network can be improved with no adverse impact to customers.
- A bachelor's degree related to Information Technology. Relevant experience may be substituted for a bachelor's degree on a year-for-year basis.
- Experience: Two (2) plus years in network security, specifically with NAC technologies.
- Technical Knowledge: Proficiency in network protocols (TCP/IP), firewalls, and segmentation.
- Tools: Hands-on experience with Cisco ISE, Aruba ClearPass, or similar platforms.
- Scripting: Familiarity with Python or PowerShell for automation.
Additional Requirements:- Knowledge of LAN, WAN and MAN; data transport such as MPLS and Metro Ethernet; routing protocols such as BGP and OSPF; TCP/IP; VLANs; 802.1q trunking; VoIP design and support; wireless networking; network monitoring tools such as SolarWinds.
- Must have the ability to design, implement and manage security policies to control, authenticate, and audit user and device access to agency networks.
- Demonstrable experience in configuring and managing Cisco NAC using ISE, Meraki Secure Access Manager or similar NAC platforms like Aruba ClearPass or Microsoft NPS with a strong grasp of zero-trust networking concepts.
- Ability to train, direct, and coordinate work of a small team of subordinate personnel.
- Ability to present technical and non-technical reports in a clear and concise manner.
- Ability to establish effective working relationships with vendors, management staff, and users.
- Position may require overnight travel.
- Position may require employee to work evenings and weekends.
- Position requires on-call shifts and call back.
- Position requires routine driver duties.
- Position requires frequent stooping and/or bending.
- Position requires frequent lifting: 25lbs.
- Position is required to report to work during hazardous weather events and emergency situations.
Applicants indicating college credit or degree(s) on the application may bring a copy of college transcript to the interview. A copy of the transcript may also be uploaded as an attachment to the application, if required by the hiring department or if desired by the applicant. Please note that some areas of the Department may require anofficial, certified copy of the transcriptprior to hiring or within a specific timeframe required by that area, after hiring. Failure to produce an official, certified transcript may result in not being hired or termination.
Relevant industry certifications such as CCNA Security, or Aruba Certified ClearPass Expert.
The Department of Administration is committed to providing equal employment opportunities to all applicants and does not discriminate on the basis of race, color, religion, sex (including pregnancy, childbirth, or related medical conditions including, but not limited, to lactation), national origin, age (40 or older), disability or genetic information.
Supplemental questions are considered part of your official application. Any misrepresentation will result in your disqualification from employment. Please complete the state application to include all current and previous work history and education. A resume will not be accepted nor reviewed to determine if an applicant has met the qualifications for the position.
The South Carolina Department of Administration offers an exceptional benefits package for full time (FTE) employees:
- Health, dental, vision, long-term disability, and life insurance for employees, spouse, and children. Clickherefor additional information.
- 15 days annual (vacation) leave per year
- 15 days sick leave per year
- 13 paid holidays
- Paid Parental Leave
- S.C. Deferred Compensation Program available(S.C. Deferred Compensation)
- Retirement benefit choices*
*Enrollment in one of the listed plans is required for all FTE employees; please refer to the contribution section of hyperlinked retirement sites for the current contribution rate of gross pay.
