Senior Network Security Engineer / NAC Consultant, hydrid in Prague

We are looking for an experienced Senior Network Security Engineer / NAC Consultant to support a large security project for a retail client in the Czech Republic. The objective of this project is to analyze the current network environment, design the NAC architecture, and define the implementation strategy across a distributed retail infrastructure.

Details:

Start: ASAP
Type: B2B Contract
Location: Czech Republic / Hybrid
Language: Czech, English

Responsibilities

• Perform assessment of the current network infrastructure and security posture
• Analyze LAN, WiFi, and switching architecture
• Identify gaps related to network access control and endpoint security
• Design the NAC architecture and access control policies
• Define authentication mechanisms (802.1X, MAB)
• Define device profiling and endpoint classification policies
• Define implementation roadmap and rollout strategy
• Determine the required team structure for implementation
• Provide technical leadership during deployment
• Define post-implementation operational and maintenance processes

Requirements

• Proved experience in Network Engineering / Network Security
• Strong experience with Network Access Control (NAC) solutions
• Experience designing and implementing NAC in enterprise environments
• Experience with large distributed networks / multi-site environments
• Strong understanding of:
• LAN / Campus networking
• VLAN segmentation
• RADIUS / TACACS
• 802.1X authentication
• Hands-on experience with at least one NAC platform:
• Cisco ISE
• Aruba ClearPass
• Forescout
• FortiNAC
• Experience integrating NAC with enterprise infrastructure
• Strong analytical and architecture design skills
• Ability to lead technical discussions with stakeholders

Nice to Have

• Experience with retail environments or large branch networks
• Experience with multi-site deployments (hundreds of locations)
• Relevant security or networking certifications (CCNP, CCIE, CISSP, etc.)