TRAVERSA SOLUTIONS, INC.Senior Network Engineer - NAC Focused (ClearPass Implementation)Reports to: Director of Service Delivery • In person, Richardson, TX • Full-time, Exempt • Travel 20-30%
About the RoleThe Senior Network Engineer, NAC, leads HPE Aruba ClearPass implementations from discovery through enforcement and handoff, and carries the LAN and WLAN work that goes with them. You will design the policy model with the customer, build it, move it from monitor mode to enforcement without taking users offline, and lead other engineers on the project.
This is not a role for learning ClearPass on the job. We need an engineer who has already designed and deployed ClearPass in production for customers, and who can take the technical lead on a project from the first week.
Key Responsibilities- Lead discovery and design workshops, and produce the NAC policy design: identity sources, roles, enforcement profiles and phased rollout plan
- Design and deploy ClearPass clusters: publisher and subscriber placement, virtual appliance sizing, high availability and licensing
- Build 802.1X authentication for wired and wireless (EAP-TLS, PEAP-MSCHAPv2), MAC authentication, guest and captive portal, and device onboarding
- Integrate certificate-based authentication with the customer's PKI, including SCEP and MDM platforms such as Microsoft Intune and Jamf
- Integrate ClearPass with Active Directory, LDAP and Microsoft Entra ID, and with firewalls and SIEM platforms for identity and context sharing
- Configure device profiling and onboarding for IoT and OT devices
- Configure TACACS+ device administration
- Configure HPE Aruba Networking AOS-CX switching and wireless (AOS 8, AOS 10 and Aruba Central), and third-party switches, as RADIUS clients; implement user-based segmentation where in scope
- Move deployments from monitor mode to enforcement in planned phases, with rollback at each stage
- Troubleshoot authentication failures using Access Tracker, endpoint logs and packet captures
- Plan and execute ClearPass upgrades and platform migrations
- Act as technical lead on assigned projects: manage technical risk, review configurations and mentor other engineers
- Support pre-sales with scoping, level-of-effort input and design review
- Deliver knowledge transfer sessions and as-built documentation
- Maintain customer documentation in SharePoint and record time and project notes in Odoo daily
Required Qualifications- 7 or more years of enterprise networking experience
- 3 or more years of hands-on ClearPass design and implementation for external customers
- Led at least three production ClearPass deployments through to 802.1X enforcement
- 5 or more years with a value-added reseller, systems integrator, managed services provider or professional services firm, consulting directly with customers: requirements gathering, design and implementation
- Active HPE Aruba Networking Certified Professional, Network Security (ACP-NS) certification.
- Strong LAN and WLAN skills: VLANs, routing, switching, RADIUS, enterprise wireless design and deployment
- Working knowledge of PKI and certificate lifecycle for device authentication
- Ability to explain design decisions to both technical and non-technical stakeholders
- Able to travel 20 to 30 percent, including overnight travel, and to support after-hours cutovers
- Authorized to work in the United States. Visa sponsorship is not available for this role
Preferred Qualifications- Experience with HPE Aruba Networking Central NAC, Juniper Mist Access Assurance, Cisco ISE or FortiNAC
- ClearPass deployments in VMware, Hyper-V, AWS or Azure
- Experience with ClearPass in higher education, K-12 or industrial/OT environments
- CCNP Enterprise, CWNA or another professional-level networking certification
- Firewall experience (Fortinet, Palo Alto Networks, Cisco or Check Point)
- Bachelor's degree in a technical discipline, or equivalent experience
Core ValuesWe hire for alignment with Traversa's core values:
- Communication
- Ownership
- Drive for Excellence and Growth
- Problem Solving and Innovation
Benefits- 401(k) with up to 3 percent employer match
- Health, dental and vision insurance
- Health savings account with $600 annual employer contribution
- Flexible spending account
- Life insurance
- Paid time off
- Employee assistance program
- Company-paid training and certification exams
Work LocationThis is an in-person role based in our Richardson, TX office (75081).
