Coralogix
Corning
Network Security Engineer (Cisco ISE)
About the opportunity
Requisition Number: 72203
TRAVEL
- Potential travel of up to 25%, which may include international destinations. During critical projects may be higher.
We will ensure that reasonable accommodations are made to enable individuals with disabilities to participate in the job application or interview process, to perform essential job functions, and to receive other employment benefits and privileges. To request an accommodation, contact us at [email protected] [[email protected]?subject=Corning%20Accommodations].
The company built on innovation.
Join Us.
How do we do it? With our people. They break with limitations and expectations—not one time in their careers, but every day. They help advance our company and the world.
At Corning, there are infinite possibilities to make an impact. You can help connect the unconnected, drive the future of autos, transform home entertainment, and secure the delivery of life-saving medicines. And much more.
Come break barriers with us.
SCOPE/PURPOSE OF POSITION
We are seeking an experienced and highly skilled Network Engineer to join our team. In this position, you will be at the forefront of designing, implementing, and optimizing innovative network solutions supporting Corning’s businesses globally. This role requires solid experience with network technologies and network authentication, a proactive mindset and a strong focus on supporting reliable and secure global network. As a Network Engineer, you will support the design, deployment, and maintenance of enterprise-wide Network Access Control solutions. You will work with platforms such as Cisco ISE to enforce secure access policies, integrate with authentication systems, and ensure compliance across diverse environments. Strong experience with automation and API integration is required to support scalable, Infrastructure as Code (IaC)-driven operations. Familiarity with OT or manufacturing environments is a plus.
A job that transforms a life.
Corning is one of the world's leading innovators in glass, ceramic, and materials science. From the depths of the ocean to the reaches of space, our technologies push the boundaries of what is possible.
Our Optical Communications business segment has recently evolved from being a manufacturer of fiber optic cable, hardware and equipment to a comprehensive, industry-leading optical solutions provider, covering the broader communications industry. This segment is classified into two main product groups: Carrier Network and Enterprise Network. The Carrier Network product group consists primarily of products and solutions for fiber optic communication infrastructures for services such as video, data, and voice communications. The Enterprise Network product group consists primarily of fiber optic communication networks directed towards businesses, governments, and individuals for their own use.
ROLES AND RESPONSIBILITIES
- Manage and administer ISE clusters to include design, implementation, and maintenance activities.
- Develop, implement, and support Network Access Controls (NAC) policies for user and device authorization to align with security compliance requirements.
- Development of radius policies for dynamic assignment of VLANs to associated devices or users as required.
- Develop and support radius wireless policies for user/device authentication.
- Support TACACS device manager service for management of enterprise grade devices.
- Work with other network technologies as needed.
- Maintain and update system certificates associated to ISE authentication processes.
- Troubleshoot ISE performance and end user authentication issues.
- Develops network design, documentation, and implementation plans for assigned projects.
- Performs proactive management and auditing of network, including event logs as needed.
- Document work via ServiceNow ticket system.
- Participate in after hours on-call, network maintenance windows and critical response activities.
- Assisting with implementation of new solutions, or upgrades to existing solutions, including communications, preparation of documentation and training.
- Participating in root cause analysis on incidents, helping to drive identification of preventative actions meant to ensure problems don’t recur, and delivering on the tasks within those actions.
Minimum requirements
EDUCATION REQUIREMENTS
4-year degree or equivalent combination of education and experience
WORK EXPERIENCE
- Experience in the deployment and support of Cisco ISE environments in support of wired/wireless/data network functions/tools/processes in a large enterprise environment.
- Experience supporting large, complex enterprise network systems.
- Experience aligning infrastructure requirements with working in both manufacturing and office environments.
REQUIRED SKILLS
- Fluent in English, with excellent verbal and written communication skills
- Experience as a Cisco ISE Engineer creating design documentation, building ISE rules, policies, implementing ISE solutions across a variety of environments, and serve as a subject matter expert.
- Hands-on experience with automation, Infrastructure as Code (IaC), and API integrations, using tools such as Python and Ansible to streamline NAC deployments and policy enforcement.
- Experience as a systems or infrastructure engineer, working directly with wired and wireless network technologies on an enterprise scale.
- Demonstrated initiative, flexibility, and ability to adapt to changing priorities and work environments.
- Proven ability to build and facilitate relationships at all levels of the organization, both internally and externally.
- Knowledge of application transport and network infrastructure protocols.
- Ability to create accurate network diagrams and documentation for design and planning network communication systems.
- Excellent communications, interpersonal and influencing skills.
- Demonstrated track record of on time delivery within budget; ability to drive projects to successful conclusion using influencing tools.
- Successfully navigate within teams across multiple initiatives, spanning various lines of business, geographic borders, time zones, and cultures.
- Will be required call available for after-hours support and an on-call rotation.
DESIRED SKILLS
- Certified Information Systems Security Professional (CISSP)
- Network certifications such as: Cisco Certified Network Professional (CCNP) or Cisco Certified Design Professional (CCDP) certification
- Knowledge of traffic analysis and performance, and network capacity/tools experience
- Experience with multi-vendor network environments including Juniper Mist, Arista and others to ensure consistent policy enforcement across diverse infrastructure
- Understanding of Agile methodologies and ability to work in Agile-drive environments
Corning offers you the complete package.
- Your well-being is our priority. Our compensation and benefits package supports your health and well-being, your financial aspirations, and your career from day one.
- Company-wide bonuses and long-term incentives align with key business results and ensure you are rewarded when the company does well. When Corning wins, we all win.
- As part of our commitment to your financial well-being and in addition to all legal benefits in Mexico, we offer grocery vouchers that ease daily costs and a structured savings fund to support your long-term financial goals.
- Salaried employees are eligible for comprehensive medical and dental coverage. Additionally, all employees receive company-sponsored life insurance, total permanent disability protection, paid time off, and access to our Employee Assistance Program (EAP) to support you and your family.
- Getting paid for our work is important, but feeling appreciated and recognized for those contributions motivates us even more. That is why Corning offers a recognition program to celebrate successes and reward colleagues who make exceptional contributions.
