Senior Security Consultant (Cisco ISE/Ansible/AWS)

About Gruve Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks. Position Summary Platform Automation Engineer responsible for automating the configuration, deployment, and validation of Cisco ISE across Gruve's multi-tenant ISE-as-a-Service (ISEaaS) platform, with 5+ years of experience in infrastructure automation. Owns the Ansible codebase, dynamic inventory, CI/CD pipelines, secrets management, and the automated validation suite that gates every customer onboarding. This role sits at the intersection of automation and network security: the successful candidate will develop working Cisco ISE knowledge as a secondary skill in order to automate the platform meaningfully rather than generically. Working knowledge of AWS and Terraform. Key Responsibilities Build and maintain dynamic inventory integration with AWS (amazon.aws.aws_ec2 plugin) driven by resource tags. Automate Cisco ISE configuration through ERS / OpenAPI interfaces and CLI where API coverage is incomplete. Automate ISE node bootstrap, deployment formation, persona assignment, certificate operations, logging targets, SNMP configuration, and backup scheduling. Design and maintain CI/CD pipelines covering linting, validation, plan/approval gates, automated apply, and post-change verification. Build and own the automated validation suite used as the onboarding acceptance gate, including health checks, replication status, and test authentication. Implement secure secrets management using AWS Secrets Manager, HashiCorp Vault, or ansible-vault; ensure no credentials are stored in code or state. Collaborate with the Cloud Architect to ensure Terraform outputs integrate cleanly into Ansible inventory and configuration workflows. Apply automation-first practices to reduce manual effort in patching, upgrades, onboarding, and recurring operational tasks. Contribute to Terraform module development as a secondary responsibility where infrastructure and configuration overlap. Automate creation of Network Device Groups and Network Devices (NADs) with RADIUS/TACACS+ shared secrets. Explicitly own pxGrid automation (certificates, clients, and subscriptions) as a distinct task, not just folded into general certificate operations. Support creation and validation of the ISE repository used for backup and certificate artifacts. Run and document a joint Terraform-apply + Ansible-idempotency validation with the AWS Cloud Architect before promoting a tenant to production. Basic Qualifications