Senior Network Security Engineer NAC Consultant, hydrid in Prague

We are looking for an experienced Senior Network Security Engineer / NAC Consultant to support a large security project for a retail client in the Czech Republic. The objective of this project is to analyze the current network environment design the NAC architecture and define the implementation strategy across a distributed retail infrastructure.

Details:

Start: ASAP
Type: B2B Contract
Location: Czech Republic / Hybrid
Language: Czech English

Responsibilities

• Perform assessment of the current network infrastructure and security posture
• Analyze LAN WiFi and switching architecture (Cisco Meraki environment)
• Identify gaps related to network access control and endpoint security
• Design the NAC architecture and access control policies
• Define authentication mechanisms (802.1X EAP-TLS MAB)
• Define device profiling and endpoint classification policies
• Design integration with Active Directory / Microsoft Entra ID / Intune
• Define implementation roadmap and rollout strategy across multiple sites
• Determine the required team structure for implementation
• Provide technical leadership during NAC deployment
• Define post-implementation operational and maintenance processes

Requirements

• Proved experience in Network Engineering / Network Security
• Strong experience with Network Access Control (NAC) solutions
• Experience designing and implementing NAC in enterprise environments
• Experience with large distributed networks / multi-site environments
• Strong understanding of:
  • LAN / Campus networking
  • VLAN segmentation
  • RADIUS / TACACS
  • 802.1X authentication
• Hands-on experience with at least one NAC platform:
  • Cisco ISE
  • Aruba ClearPass
  • Forescout
  • FortiNAC
• Experience integrating NAC with enterprise identity systems (AD / Entra ID)
• Strong analytical and architecture design skills
• Ability to lead technical discussions with stakeholders

Nice to Have

• Experience with retail environments or large branch networks
• Experience with multi-site deployments (hundreds of locations)
• Relevant security or networking certifications (CCNP CCIE CISSP etc.)