Aruba SME - L3 Level

Role & responsibilities

• Design, deploy, and configure Aruba ClearPass Policy Manager (CPPM)-High Availability Guest, OnGuard, OnBoard, and integration with RADIUS, TACACS+, Active Directory, PKI, and MFA solutions
• Implement NAC policies for wired and wireless access across multi-vendor environments (primarily Aruba)
• Configure Aruba switches and WLAN controllers/APs for integration with ClearPass
• Design and enforce Network Access Control (NAC) policies aligned with security standards (e.g., 802.1X, MAB, EAP-TLS).
• Troubleshoot complex authentication and network access issues involving wired, wireless, and VPN endpoints.
• Optimize and fine-tune WLAN (Aruba Mobility Controllers, Instant APs) and LAN (CX/OS switches) deployments
• Provide Level 3/SME-level support for ClearPass NAC, Aruba LAN,Aruba Central and Wi-Fi environments
• Develop documentation, operational runbooks, and conduct knowledge transfer sessions.
• Provide design documentation, HLD/LLDs, network diagrams, and policy matrix documentation
• Serve as the technical authority and escalation point for complex deployments and integrations, working in tandem with network engineering, cybersecurity, operations, compliance, and architecture teams.

Technical & Functional Skills & Certifications

Aruba Certified ClearPass Expert (ACCX) or Aruba Certified ClearPass Professional (ACCP).

Aruba Certified Switching Professional (ACSP) or Expert (ACSX).

Aruba Certified Mobility Professional (ACMP) or Expert (ACMX).

Experience in multi-vendor NAC/Wi-Fi/LAN environments (Cisco, Fortinet, etc.) is a plus

• 8+ years in network security engineering, with at least 5-6 years of hands-on experience with Aruba Technologies
• Strong knowledge of RADIUS/TACACS+, 802.1X, authentication protocols, device profiling, and guest access.
• Experience with ClearPass cluster design, scalability, and integration with SIEM/SOC tools.
• Experience with API integrations and endpoint profiling.
• Experience integrating ClearPass with AD, Azure AD, PKI, and MDM/UEM platforms (Intune, AirWatch, etc.)
• Strong experience with Aruba switching (CX & legacy AOS switches) and configuration best practices.
• Strong troubleshooting and problem-solving abilities in critical production environments
• Excellent communication, documentation, and client-facing skills
• Experience with Zero Trust Network Access (ZTNA) concepts.
• Working knowledge of scripting and automation (e.g., Python, Ansible) is a plus.
• Knowledge and experience in cloud computing infrastructure and orchestration
• Knowledge of Software Defined Networks and Network Function Virtualisation technologies