Required Skills & Experience
- 8+ years of professional experience in network engineering and security, including enterprise NAC (Network Access Control) deployments
- Practical experience developing Forescout policy
- Experience with security orchestration and automation.
- Experience integrating Forescout with IT security and management systems.
- Experience with the deployment or maintenance of ForeScout CounterACT appliances in medium to large enterprise environments.
- Strong writing and communication skills; ability to produce clear technical documentation.
- High school diploma or GED
- Active Secret level security clearance (or higher)
- IAT Level II certification: Requires both an IA Certification (e.g., Security+ CE, or higher) *AND* an Operating Environment (OE) Certification (Relevant Network/Forescout Cert, e.g., CCNA, CCNP, CCIE etc.) for CSWF compliance.
- Ability to support on site delivery and collaborate with government stakeholders minimum 2 day per week, with potential expansion as directed by the client.
- Ability to perform OCONUS Travel (typically 1-3 weeks trip duration, up to approx. 3 times a year, planned 3+months in advance)
Nice to Have Skills & Experience
- Advanced knowledge developing Forescout policy.
- Advanced knowledge of EAP-TLS, 802.1x, MAB, and RADIUS.
- Direct experience executing DoD Comply to Connect (C2C) programs and leading pilot to production rollouts.
- Knowledge of DoD information security policies, STIGs, standards, procedures, directives, frameworks, and risk management processes for enterprise systems
- Deep familiarity with Forescout modules (CounterACT/eyeSight, eyeControl, Policy Manager, SecureConnector/agent), and API integrations
- NAC (Network Access Control) experience across multiple vendors (Cisco ISE and SDA), including comparative policy design
- Experience with wireless NAC (Network Access Control) and wireless controllers
- Experience with HBSS/ESS, MDE/XDR (e.g., Trellix, CrowdStrike, Microsoft Defender), MCC/Intune
- Experience architecting and designing IP networks
- Familiarity with RMF and ATO processes
- Exposure to Zero Trust principles (identity centric access, micro segmentation, least privilege) and NIST SP 800 53/800 207 alignment
- Relevant certifications: ForeScout Certified Administrator (FSCA) or ForeScout Certified Engineer (FSCE) Certification , Security+ (DoD 8570/8140), CASP+, CISSP, CCNP Enterprise/Security, Aruba/Juniper certifications
- Experience in OT/IoT device discovery and segmentation
- Scripting for automation (Python/PowerShell), and experience with REST/webhooks to orchestrate policy actions
- Strong communication skills
Job Description
We are seeking a highly motivated and skilled Network Engineer with extensive hands-on experience administering Forescout and supporting network infrastructure across enterprise environments. The ideal candidate is an analytical problem solver comfortable with complex technical challenges spanning network devices and endpoints. You will be regarded as a go-to resource for troubleshooting, optimization, and resilient network access control designs in a fast-paced enterprise IT environment. You will design and document best-practice network access control strategies for mission-critical workloads using Forescout and develop hardened installation and configuration procedures aligned with Navy standards. You will provide Tier 4 support to the operational network as needed, collaborating with engineers and solution owners to select and implement the optimal access control strategy for each workload.
