Senior Network Security Engineer / NAC Consultant, hydrid in Prague

We are looking for an experienced Senior Network Security Engineer / NAC Consultant to support a large security project for a retail client in the Czech Republic. The objective of this project is to analyze the current network environment, design the NAC architecture, and define the implementation strategy across a distributed retail infrastructure. Details: Start: ASAP Type: B2B Contract Location: Czech Republic / Hybrid Language: Czech, English Responsibilities Perform assessment of the current network infrastructure and security posture Analyze LAN, WiFi, and switching architecture (Cisco Meraki environment) Identify gaps related to network access control and endpoint security Design the NAC architecture and access control policies Define authentication mechanisms ( 802.1X, EAP-TLS, MAB ) Define device profiling and endpoint classification policies Design integration with Active Directory / Microsoft Entra ID / Intune Define implementation roadmap and rollout strategy across multiple sites Determine the required team structure for implementation Provide technical leadership during NAC deployment Define post-implementation operational and maintenance processes Requirements Proved experience in Network Engineering / Network Security Strong experience with Network Access Control (NAC) solutions Experience designing and implementing NAC in enterprise environments Experience with large distributed networks / multi-site environments Strong understanding of: LAN / Campus networking VLAN segmentation RADIUS / TACACS+ 802.1X authentication Hands-on experience with at least one NAC platform: Cisco ISE Aruba ClearPass Forescout FortiNAC Experience integrating NAC with enterprise identity systems (AD / Entra ID) Strong analytical and architecture design skills Ability to lead technical discussions with stakeholders Nice to Have Experience with retail environments or large branch networks Experience with multi-site deployments (hundreds of locations) Relevant security or networking certifications (CCNP, CCIE, CISSP, etc.)