HPE Aruba Networking ClearPass / NAC Specialist
About the role
The HPE Aruba Networking ClearPass / NAC Specialist will lead the technical design and delivery of enterprise Network Access Control (NAC) solutions. The role involves assessing existing network and authentication environments, developing design recommendations, and managing implementation from discovery through deployment and handover. The specialist will work closely with engineering teams and customer stakeholders to deliver secure wired and wireless network access as part of a broader network redesign. Key responsibilities include technical assessment, solution design, ClearPass and NAC implementation, proof-of-concept validation, stakeholder collaboration, and documentation. The ideal candidate has strong Level 3 expertise in HPE Aruba Networking, hands-on experience with ClearPass and Aruba Central, and a track record of implementing 802.1X authentication and NAC solutions in production environments. The position is with a specialist technology services provider supporting organizations across Australia and the South Pacific.
Must have
- Demonstrated Level 3 expertise in HPE Aruba Networking, supported by recent, hands-on experience deploying ClearPass and Aruba Central in enterprise environments
- Proven experience delivering multiple NAC engagements, covering technical assessment, solution design, configuration, validation, and implementation
- Strong production experience implementing 802.1X authentication on Aruba platforms, including an understanding of deployment constraints and troubleshooting
- Ability to independently assess existing environments, recommend appropriate solutions, and deliver agreed technical outcomes with minimal supervision
- Experience leading technical workshops and explaining design decisions to experienced customer engineering teams
- Strong knowledge of Aruba ClearPass Policy Manager and Aruba Central, including deployment, configuration, integration, and troubleshooting
- Practical understanding of Classic Central and New Central, including platform differences and their implications for NAC architecture, hardware capabilities, and firmware dependencies
- Experience with 802.1X, EAP methods, RADIUS, TACACS+, MAC authentication, and wired and wireless access control
- Familiarity with device profiling, posture assessment, guest access, and role-based policy enforcement
- Understanding of enterprise identity systems, authentication services, and network policy enforcement
- Experience integrating NAC solutions with enterprise identity, networking, and security platforms
- Familiarity with Microsoft Active Directory, Entra ID, PKI, MDM, firewalls, and SIEM platforms
- Strong troubleshooting skills across authentication, policy enforcement, and network connectivity
- Ability to manage technical changes methodically, validate outcomes, and maintain accurate configuration records
- Excellent written and verbal communication skills, with the ability to explain complex technical concepts clearly
- Strong ownership, sound judgement, and the ability to manage priorities independently
- A structured, methodical approach to troubleshooting, testing, and technical change
- High attention to technical accuracy, documentation, and implementation quality
- Proactive communication of progress, risks, dependencies, and recommendations
- A collaborative and professional approach to working with customer engineers and delivery partners
Nice to have
- Relevant HPE Aruba Networking certifications, such as ACCP, ACMP, ACCX, or an equivalent current qualification
- Experience with Aruba CX switching and Aruba wireless, particularly Aruba 2930 and CX 6200 switches
- Practical experience implementing certificate-based authentication and PKI
- Familiarity with Microsoft Intune, Entra ID, or Okta integrations
- Experience integrating NAC solutions with Palo Alto Networks or Fortinet firewalls and SIEM platforms
- Delivery experience in government, education, or other regulated environments
Technologies
- Active Directory
- Authentication
- Azure
- Cybersecurity
- Microsoft Entra ID
- Firewall
- Firmware
- Fortinet
- Intune
- MDM
- Okta
- Palo Alto Networks
- PKI
- SIEM
Highlights
Salary is paid in Australian Dollars. Medical insurance is provided from day one for you and your spouse (or parents if unmarried). Home office setup, internet, gym, and wellness allowances are included. Flexible work arrangements are available (home or office). The company offers reimbursement for industry certifications and regular team events. AI tools may be used in the hiring process, but final decisions are made by humans.
Jobs across Sri Lanka, watched for you.Colombo, Sri Lanka