Senior Network Administrator – NAC ARP Guard

Key Responsibilities
1) NAC Installation & Core Configuration (ARP Guard)
2) Policy, Enforcement & Segmentation
3) High Availability, Clustering & Scalability
4) Operations, Monitoring & Maintenance
5) Troubleshooting & Incident Response
6) Security & Compliance
7) Network Administration (Core Complementary Skills)
8) Decommissioning & Lifecycle Management

Certifications (Preferred)
Network: CCNA/CCNP, JNCIA/JNCIS, Aruba ACNSA/ACSP, or equivalent.
Security/ITIL: Security+ / CySA+ / ITIL Foundation.
Behavioral Competencies
Customer‑first mindset, strong ownership and urgency.
Excellent written and verbal communication across technical and non‑technical stakeholders.
Analytical, detail‑oriented, and calm under pressure.
Shift & Availability
Business hours with on‑call rotation for critical incidents.
Availability for planned change windows, DR/HA tests, and audits.

Required Skills & Qualifications
6+ years overall network administration with at least 3+ years focused on NAC/ARP Guard in production.
Hands‑on with ARP Guard components, policy creation, enforcement modes, and HA setups.
Strong understanding of L2/L3 networking: VLANs, STP, trunking, ARP, DHCP, routing basics, multicast/IGMP.
Working knowledge of switch OS (Cisco/Aruba/Juniper or equivalent), WLAN controllers, and Windows/Linux endpoints.
Experience integrating with identity stores (AD/LDAP), SIEM, and ITSM tools (ServiceNow, Remedy, Jira).
Proficiency in change/incident/problem (ITIL) and disciplined documentation.
Preferred Skills
Experience with 802.1X/EAP‑TLS, RADIUS, and certificate lifecycle.
Scripting/automation (Python, PowerShell, Bash) for bulk operations and reporting.
Exposure to zero‑trust segmentation approaches and NAC alternatives.

The Senior Network Administrator (NAC - ARP Guard) is responsible for end-to-end ownership of Network Access Control built on ARP Guard tooling, including greenfield installs, configuration baselining, policy design, production administration, high availability/clustering, incident response, troubleshooting, periodic audits, and secure decommissioning.
The role interfaces closely with security, endpoint, server, and service desk teams to ensure only compliant, identified, and authorized devices connect to the network while maintaining user experience and uptime SLAs.