Network Access Control (NAC) Engineer

WHY UT SOUTHWESTERN?
With over 75 years of excellence in Dallas-Fort Worth, Texas, UT Southwestern is committed to excellence, innovation, teamwork, and compassion. As a world-renowned medical and research center, we strive to provide the best possible care, resources, and benefits for our valued employees. Ranked as the number 1 hospital in Dallas-Fort Worth according to U.S. News & World Report, we invest in you with opportunities for career growth and development to align with your future goals. Our highly competitive benefits package offers healthcare, PTO and paid holidays, on-site childcare, wage, merit increases and so much more. We invite you to be a part of the UT Southwestern team where you'll discover a culture of teamwork, professionalism, and a rewarding career!

JOB SUMMARY
This position is responsible for the design, implementation, and management of network access control solutions, with a strong emphasis on RADIUS and 802.1X authentication. The Network Access Control (NAC) engineer will be responsible for securing wired, wireless, and remote network access, ensuring proper enforcement of access policies, and maintaining network security standards. This role requires deep expertise in network access control systems, as well as a strong understanding of 802.1X protocols and RADIUS configurations. Our ideal candidate has experience with Cisco, Aruba or HP Enterprise networking. This position does not support H1B sponsorship. Candidates must reside in the Dallas/Ft. Worth metroplex or be willing to relocate. This position is eligible for a hybrid work schedule.

BENEFITS
UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:

• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare-no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Learn more about these and other UTSW employee benefits!

EXPERIENCE AND EDUCATION
Required

• Education
  Bachelor's Degree in Business Administration, Computer Science, Engineering, Telecommunications, or a related field.

• Experience
  5 years of progressively responsible experience in complex network or telecommunications systems, network engineering, or design.

Preferred

• Experience
  Leadership and experience in mid- to large-scale information systems implementation projects is highly preferred.
  Expertise in Aruba ClearPass or Cisco ISE is essential, with Cisco CCIE certification being a significant advantage. Additional certifications such as CCNP, CCDP, or Aruba certifications are highly desirable.

• Licenses and Certifications
  CCIE (Cisco Certified Internetwork Expert) certification or
  CCNP Cisco Certified Network Professional or
  Cisco Certified Design Professional (CCDP) or
  Aruba Certification

JOB DUTIES

• Configures, deploys, and manages Radius configuration to provide network access control, ensuring the security of wired, wireless, and remote connections.
• Develops and enforces network access policies, including 802.1X authentication, device profiling, role-based access, and guest access.
• Integrates Radius policy with existing network infrastructure (e.g., firewalls, routers, switches) and troubleshoot any performance or connectivity issues.
• Implements and supports authentication mechanisms such as RADIUS, TACACS+, and LDAP/Active Directory integration to control user access.
• Monitors and analyzes network access logs, generate reports, and proactively identify potential security risks or policy violations.
• Firmware and Software Upgrades: Ensure radius appliances and associated infrastructure are up-to-date with the latest patches and software releases.
• Provides ongoing operational support for radius and related network security systems, including incident response.
• Collaboration: Works closely with the IT security, network engineering, and operations teams to maintain a secure and efficient network environment.
• Documentation: Develops and maintains technical documentation, including network diagrams, configuration guides, and policy overviews.
• Collaborates with executive leadership to develop and communicate long term vision and comprehensive strategic plans for infrastructure and enterprise architecture solutions.
• Defines principles/standards for infrastructure and/or enterprise architecture.
• Leverages automation, scripting and network programmability.
• Functions as team lead and Tier III engineer for the technology infrastructure and systems teams that support platforms that provide technology services. These systems may include identity, access management and authentication services.
• Researches and evaluates new technologies that transform and improve the technical environment.
• Designs and implements high availability solutions based on disaster recovery / business continuity requirements.
• Develops and fosters business relationships with strategic original equipment manufacturers (OEMs) and other Key Partners.
• Conducts research on network products, services, protocols and standards to remain abreast of developments in the networking industry.
• Develops and articulates the vision and direction of technology, and directs the implementation of the resulting technical hardware and software systems for a particular business area.
• Develops and coordinates strategy, research and development of advanced technology systems and development projects, and builds the business case or justification for such activity.
• Acts as senior consultant and mentor to Information Resources (IR) and Network Engineers, Technicians, Developers, Analysts or Administrators, providing advice and in-depth consultation on complex systems analysis and design requiring advanced techniques.
• Reviews and evaluates feasibility studies, and prepares recommendations based on in-depth knowledge of problems and capabilities of potential approaches.
• Develops and conducts training in systems conceptualization, engineering, analysis, design, implementation and operations.
• May provide supervision to project-related staff as needed.
• Performs other duties as assigned.

SECURITY AND EEO STATEMENT
Security
This position is security-sensitive and subject to Texas Education Code 51.215, which authorizes UT Southwestern to obtain criminal history record information.

EEO Statement
UT Southwestern Medical Center is committed to an educational and working environment that provides equal opportunity to all members of the University community. As an equal opportunity employer, UT Southwestern prohibits unlawful discrimination, including discrimination on the basis of race, color, religion, national origin, sex, sexual orientation, gender identity, gender expression, age, disability, genetic information, citizenship status, or veteran status.

UT Southwestern is proud to offer a competitive and comprehensive benefits package to eligible employees. Our benefits are designed to support your overall wellbeing, and include:
• PPO medical plan, available day one at no cost for full-time employee-only coverage
• 100% coverage for preventive healthcare - no copay
• Paid Time Off, available day one
• Retirement Programs through the Teacher Retirement System of Texas (TRS)
• Paid Parental Leave Benefit
• Wellness programs
• Tuition Reimbursement
• Public Service Loan Forgiveness (PSLF) Qualified Employer
• Learn more about these and other UTSW employee benefits!