Senior Network Administrator – NAC ARP Guard

The Senior Network Administrator (NAC – ARP Guard) is responsible for end-to-end ownership of Network Access Control built on ARP Guard tooling, including greenfield installs, configuration baselining, policy design, production administration, high availability/clustering, incident response, troubleshooting, periodic audits, and secure decommissioning.
The role interfaces closely with security, endpoint, server, and service desk teams to ensure only compliant, identified, and authorized devices connect to the network while maintaining user experience and uptime SLAs.

Key Responsibilities:

1. NAC Installation & Core Configuration (ARP Guard)
2. Policy, Enforcement & Segmentation
3. High Availability, Clustering & Scalability
4. Operations, Monitoring & Maintenance

Troubleshooting & Incident Response:

Security & Compliance:

1. Network Administration (Core Complementary Skills)

Decommissioning & Lifecycle Management:

Required Skills & Qualifications:

6+ years overall network administration with at least 3+ years focused on NAC/ARP Guard in production.
Hands‑on with ARP Guard components, policy creation, enforcement modes, and HA setups.
Strong understanding of L2/L3 networking: VLANs, STP, trunking, ARP, DHCP, routing basics, multicast/IGMP.
Working knowledge of switch OS (Cisco/Aruba/Juniper or equivalent), WLAN controllers, and Windows/Linux endpoints.
Experience integrating with identity stores (AD/LDAP), SIEM, and ITSM tools (Service Now, Remedy, Jira).
Proficiency in change/incident/problem (ITIL) and disciplined documentation.

Preferred Skills:

Experience with 802.1X/EAP‑TLS, RADIUS, and certificate lifecycle.
Scripting/automation (Python, PowerShell, Bash) for bulk operations and reporting.
Exposure to zero‑trust segmentation approaches and NAC alternatives.

Certifications (Preferred)
Network: CCNA/CCNP, JNCIA/JNCIS, Aruba ACNSA/ACSP, or equivalent.
Security/ITIL: Security+ / CySA+ / ITIL Foundation.
Behavioral Competencies
Customer‑first mindset, strong ownership and urgency.
Excellent written and verbal communication across technical and non‑technical stakeholders.
Analytical, detail‑oriented, and calm under pressure.

Shift & Availability:

Business hours with on‑call rotation for critical incidents.
Availability for planned change windows, DR/HA tests, and audits.

Education: Bachelor of Engineering,Bachelor Of Technology

• Preferred skills: Domain->Network->Data networking Access technologies,Domain->Network->Data networking WLAN Protocols & Standards,Domain->networking->Cisco certifications,Domain->Networking->Cisco
• WLAN controllers,Technology->Architecture->Architecture
• ITIL,Technology->Infrastructure Security->Network Access Control (NAC),Technology->Infrastructure-Server Administration->LDAP Server