Principal Network Access Control (NAC) Engineer

Ft Meade, MD

Full Time

Experienced

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success!

Job Summary
JCS Solutions is seeking a Principal Network Access Control (NAC) Engineer to support the modernization and integration of a large-scale, geographically distributed enterprise wireless environment supporting a Department of Defense customer. This role serves as a senior technical engineer responsible for wireless infrastructure modernization, Aruba Central implementation, controller migration, network resiliency improvements, wireless security enhancements, and enterprise network access control integration.
The successful candidate will provide technical leadership across Aruba wireless technologies, Aruba Central, Aruba ClearPass, Cisco ISE, enterprise authentication services, wireless security platforms, and monitoring integrations. This position will work closely with cloud, network, cybersecurity, identity management, and operations teams to deliver secure, scalable, and highly available wireless services.
This role requires a hands-on engineer capable of designing, implementing, testing, documenting, and transitioning enterprise wireless solutions while providing technical guidance and leadership across engineering teams.

Location: Ft. Meade, MD
Clearance: Secret
Salary: $104,000.00 - $149,000.00
Certification: Active DoD 8140/8570 IAT Level II certification.

What’s in it for you:

Join a premier technology firm specializing in innovative solutions.
Be part of a collaborative, inclusive, and innovative work culture.
Enjoy tremendous growth potential in a high-performing team environment.
A robust benefits package:
- Health, dental, and vision insurance
- Life insurance
- Short-and-long term disability
- Paid time off (PTO)
- 401k retirement plan with employer match
- Annual Professional Development Reimbursement Program
- And more!

What you will do:

Wireless Architecture and Controller Migration
Design, engineer, and implement the migration of existing Aruba wireless controllers to a centralized cloud-hosted infrastructure.
Deploy and configure Aruba Central for centralized wireless management, configuration standardization, monitoring, and operational visibility.
Develop controller migration strategies, implementation procedures, validation plans, and rollback processes.
Standardize NTP configurations across wireless controllers, access points, and supporting network infrastructure.
Evaluate and establish wireless deployment standards, including bridge versus tunnel mode and campus versus remote architectures.
Develop standardized configurations and deployment playbooks for geographically distributed sites.
Coordinate cloud infrastructure integration, including connectivity, routing, security requirements, and availability.
Wireless High Availability and Network Resiliency
Design and implement Layer 2 and Layer 3 redundancy to improve wireless availability and service continuity.
Configure and validate controller failover, preemption, and recovery to preferred controllers following service restoration.
Implement and troubleshoot VRRP, virtual IP addressing, and controller high-availability configurations.
Evaluate and optimize DHCP, GRE tunnels, routing, and wireless traffic forwarding across centralized and distributed environments.
Develop and execute failover and recovery testing to validate wireless resiliency.
Troubleshoot complex controller, routing, and wireless connectivity issues.
Wireless Security and Network Access Control
Design and implement enterprise wireless security standards, including WPA3, Wireless Intrusion Detection Systems (WIDS), and identity-based access controls.
Configure wireless security policies through Aruba Central and validate deployment to controllers and access points.
Evaluate hardware compatibility and develop migration strategies for WPA3 adoption, including transition-mode considerations.
Standardize wireless configurations, including 5 GHz operation, authentication, and security settings.
Integrate wireless infrastructure with Cisco ISE, Aruba ClearPass, and enterprise identity services.
Configure and troubleshoot 802.1X, RADIUS, EAP-TLS, certificate-based authentication, and wireless access policies.
Coordinate identity-based policy integration with Microsoft Entra ID, VPN infrastructure, and firewall enforcement.
Monitoring and Enterprise Integration
Integrate Aruba Central with ScienceLogic SL1 to support wireless monitoring, alerting, device discovery, and performance visibility.
Coordinate with monitoring engineers to establish required APIs, monitoring policies, and operational dashboards.
Validate controller status, access point availability, authentication health, and wireless performance monitoring.
Support integration with enterprise DNS, DHCP, NTP, routing, and security infrastructure.
Identify opportunities to automate wireless configuration, monitoring, and troubleshooting.
Guest Wireless and Security Integration
Develop secure guest wireless architecture, including network segmentation and Internet connectivity options.
Evaluate guest authentication methods, including temporary credentials, PPSK, and IPSK.
Support guest wireless security requirements, implementation planning, and authorization documentation.
Coordinate technical security assessments, configuration validation, and required infrastructure approvals.
Technical Leadership and Documentation
Serve as a senior technical subject matter expert for Aruba wireless infrastructure and centralized wireless management.
Provide technical direction, mentoring, and engineering guidance to network engineering personnel.
Lead technical design reviews, implementation planning, integration testing, and troubleshooting activities.
Identify technical risks, dependencies, and operational impacts associated with wireless modernization.
Establish repeatable engineering standards and implementation procedures for deployment teams.
Support production migration, validation, and transition to operations.
Develop and maintain wireless architecture and cloud integration diagrams.
Develop Aruba Central and controller configuration standards.
Create controller migration procedures, failover designs, test plans, validation procedures, SOPs, migration playbooks, and operations transition documentation.

What you will bring:

Bachelor's degree with 12+ years of relevant experience, or Master's degree with 10+ years of relevant experience.
Additional relevant experience, education, or training may be considered in lieu of a degree.
U.S. Citizenship required.
Active DoD Secret security clearance.
Active DoD 8140/8570 IAT Level II certification.
Significant hands-on experience engineering, implementing, and supporting enterprise Aruba wireless infrastructure, including controllers, access points, and centralized management platforms.
Experience with Aruba Central, including configuration management, controller integration, and enterprise wireless deployments.
Strong knowledge of enterprise wireless networking, including 802.11 standards, RF fundamentals, WLAN architecture, VLANs, routing, and switching.
Experience implementing and troubleshooting wireless controller redundancy, high availability, failover, and network resiliency.
Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms.
Experience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms.
Experience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments.
Strong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues.
Strong written and verbal communication skills.
Experience providing technical guidance and developing engineering documentation.
Must meet applicable cybersecurity workforce qualification requirements for the assigned position.

How you will wow us:

Experience migrating Aruba wireless controllers to cloud-hosted or centrally managed environments.
Experience with Aruba Central On-Premises or cloud-managed Aruba deployments.
Experience implementing VRRP, controller preemption, and Layer 2/Layer 3 failover architectures.
Experience with bridge-mode, tunnel-mode, campus, and remote wireless architectures.
Experience integrating Cisco ISE and Aruba ClearPass with enterprise wireless infrastructure.
Experience integrating wireless authentication with Microsoft Entra ID, Active Directory, and PKI.
Experience implementing WPA3, WIDS/WIPS, PPSK/IPSK, and wireless security standards.
Experience integrating Aruba Central with ScienceLogic SL1 or comparable monitoring platforms.
Experience designing secure guest wireless networks with isolated Internet connectivity.
Experience with wireless RF optimization, 5 GHz deployments, and high-density environments.
Experience with Python, REST APIs, Ansible, or similar network automation technologies.
Experience supporting security authorization activities, configuration hardening, and compliance assessments.
Experience supporting geographically distributed enterprise networks.

JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.

JCS is both a Great Place to Work and a Top Places to Work certified company.

Our employees embody our core values, and we are looking for others who do too!

Customer Experience: Strive for excellence and delight our clients
Innovation: Embrace creative thinking to enable continual growth and powerful solutions
Accountability: Take ownership of and pride in our actions and service delivery
Inspire: Be inspired to be your best self and have fun in the process
Integrity: Do the right thing, the right way, every time!
Stewardship: The careful and responsible management of something entrusted to our care.

At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $104,000.00 - $149,000.00

Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team will only come from @JCSSolutions.com. We want to emphasize that we do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.

Apply for this position

Required*

First Name*

Last Name*

Email Address*

Phone*

Address

Resume*

We've received your resume. Click here to update it.

Attach resume or Paste resume

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or Paste resume

Paste your resume here or Attach resume file

This position requires U.S. citizenship due to contractual, regulatory, or security requirements. Are you a U.S. citizen?*

Please indicate the highest DoD security clearance you currently hold and select all that apply:*

Do you currently hold an active DoD 8140 IAT Level II certification (Security+ CE or equivalent)?*

Please upload a copy of your current DoD 8140 IAT Level II certification.

The salary range for this position is listed in the job posting.
Based on that range, what is your minimum salary requirement to consider this opportunity?*

This position is located in Fort Meade, MD and is currently expected to be primarily onsite. Are you interested in an onsite, hybrid, or remote work environment?*

Do you have significant hands-on experience engineering, implementing, and supporting Aruba wireless infrastructure, including Aruba controllers, access points, and Aruba Central?*

Do you have experience implementing or supporting Aruba ClearPass, Cisco ISE, WPA3, 802.1X, RADIUS, EAP-TLS, certificate-based authentication, or enterprise network access control solutions?*

Do you have experience implementing wireless controller migrations, high availability architectures, VRRP, controller failover, redundancy solutions, or enterprise wireless resiliency initiatives?*

Do you meet one of the following qualifications through education or relevant work experience?*

The following questions are entirely optional.

To comply with government Equal Employment Opportunity and/or Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.

Gender

Race/Ethnicity

Invitation for Job Applicants to Self-Identify as a U.S. Veteran

A “disabled veteran” is one of the following:
- a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
- a person who was discharged or released from active duty because of a service-connected disability.
A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran status

I IDENTIFY AS ONE OR MORE OF THE CLASSIFICATIONS OF PROTECTED VETERAN LISTED ABOVE
I AM NOT A PROTECTED VETERAN
I DON’T WISH TO ANSWER

Human Check*

Submit Application