Solutions Architect , AI Infrastructure & Cybersecurity
About Gruve
Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.
About the Role
The Solutions Architect will be a part of the US Solutions Delivery team and is responsible for leading planning, deployment, and validation of Cisco ISE-based segmentation across enterprise campus environments of our customer, on-site at the customer location. This role is delivery-focused and security-first - combining deep expertise in identity-based access control with hands-on policy engineering and enforcement validation. The architect ensures segmentation architectures are operationally sound, scalable, and Day-2 ready, while coordinating closely with customer network, security, and endpoint teams. The ideal candidate holds CCIE Security-level expertise and brings 8–10 years of hands-on experience in Cisco security and network segmentation.
Key Responsibilities
Segmentation Design & Deployment
- Drive rollout of ISE-based segmentation across the campus environment
- Deploy and operationalize TrustSec / Security Group Tag (SGT) policy architecture
- Define, validate, and troubleshoot SGACLs, authorization policies, profiling rules, and enforcement workflows
Integration & Troubleshooting
- Integrate Cisco ISE with switches, wireless controllers, VPN concentrators, and security platforms
- Optimize and troubleshoot 802.1X, MAB, profiling, posture, TrustSec, and pxGrid.
- Validate endpoint classification, policy assignment, and segmentation enforcement across user, device, and application traffic flows
Execution & Coordination
- Coordinate testing, pilot execution, phased migration, and production cutover activities
- Identify and resolve deployment issues, policy conflicts, authentication failures, and enforcement gaps in partnership with customer stakeholders
- Support Cisco Catalyst Center integration and automation workflows
Handover & Documentation
- Execute change implementation following customer change management processes
- Deliver operational handover documentation, runbooks, and knowledge transfer sessions
Basic Qualifications
- 8–10 years in Cisco security engineering, network segmentation, or architecture roles
- Expert-level knowledge of Cisco ISE — deployment, policy design, TrustSec/SGT, and administration
- CCIE Security certification or equivalent demonstrated expertise (CCNP Security + deep ISE specialization considered)
- Hands-on with 802.1X, MAB, profiling, posture, pxGrid, and Catalyst Center for wired and wireless environments
- Proven experience in customer-facing architecture, consulting, or delivery leadership
- Good understanding of networking basics — routing, switching, VLANs, TCP/IP, along with general knowledge of campus networking
Preferred Qualifications
- Knowledge of Cisco Secure Firewall / Next-Generation Firewall (NGFW)
- Cisco Catalyst Center — network device management, zero-touch provisioning, software image management (SWIM), automation workflows, network assurance, and ISE integration
- CISSP, GIAC, or other industry-recognized security certifications
- Experience with security automation and scripting (Python, Ansible, APIs)
- Knowledge of Cisco Secure Access, Umbrella, or XDR platforms; familiarity with compliance frameworks (PCI-DSS, HIPAA, SOC 2, GDPR)
Salary Range
$150,000 - $175,000 USD
Why Gruve
At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.
Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.