NAC Engineer

- Review and remediate existing NAC exception policies to ensure alignment with organisational standards and vendor best practices - Identify and remove overly permissive or misaligned access exceptions, including inappropriate MAC-based policies - Enforce deny-by-default, allow-list access models using identity, device type, and posture - Implement and refine device profiling and posture validation rules - Improve role-based access control and dynamic policy enforcement (e.g. VLAN assignment) - Perform gap analysis against NAC vendor best practices - Collaborate closely with Security Engineering and Network Operations teams during remediation - Ensure changes follow formal change control processes - Produce clear documentation including NAC exception audit reports (pre- and post-remediation), updated access control matrices, final remediation and validation summaries, and executive-level summaries for stakeholders