11703 Forescout NAC L2 Engineer

Cephas Consultancy Services Private Limited; Mumbai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Cephas Consultancy Services Private Limited is seeking an experienced Forescout NAC L2 Engineer to manage, monitor, troubleshoot, and support NAC infrastructure in an enterprise environment. Immediate joiners only, rotational six-day shifts, in-office interview process.

The role requires 5+ years of experience with Forescout NAC, strong NAC knowledge, and the ability to handle L2 incidents while coordinating with cross-functional teams.

Qualifications

• Strong hands-on experience with Forescout NAC.
• Good understanding of Network Access Control concepts and endpoint profiling.
• Hands-on experience with Forescout policy configuration and troubleshooting.
• Strong knowledge of 802.1X and MAB authentication.
• Good understanding of VLANs, DHCP, DNS, TCP/IP, switching and routing fundamentals.

Responsibilities

• Provide L2 operational and technical support for Forescout NAC infrastructure.
• Administer and monitor the Forescout platform, including appliances, modules, policies, and endpoint visibility.
• Configure and manage NAC policies for wired, wireless, and remote endpoints.
• Troubleshoot endpoint authentication, classification, authorization, and network access issues.
• Manage endpoint profiling, classification, compliance checks, and remediation policies.
• Coordinate with Network, Security, Service Desk, and OEM/vendor teams for complex issues.
• Participate in change implementation, testing, and post-change validation.

Skills

Forescout NAC

NAC concepts

Policy configuration

802.1X & MAB

VLANs & DHCP

Cisco switches

RADIUS / LDAP

Endpoint profiling

NAC troubleshooting

Job description

About this position

Positions:1 Full Time
Experience
5 - 9 Years

Role :- Forescout NAC L2

Experience :- Min 5 Yrs

Notice Period:- Immediate Joiners Only

Shift timings and working days :- Rotational Shifts / 6 days

Interview – F2f @ Office (2rounds of Technical)

JD:-

We are looking for an experienced Forescout NAC L2 Engineer to manage, monitor, troubleshoot, and support Network Access Control infrastructure in an enterprise environment. The candidate will be responsible for day-to-day administration of the Forescout platform, endpoint visibility and compliance, policy configuration, incident troubleshooting, and coordination with network and security teams.

Key Responsibilities

• Provide L2 operational and technical support for Forescout NAC infrastructure.
• Administer and monitor the Forescout platform, including appliances, modules, policies, and endpoint visibility.
• Configure and manage NAC policies for wired, wireless, and remote endpoints.
• Troubleshoot endpoint authentication, classification, authorization, and network access issues.
• Manage endpoint profiling, classification, compliance checks, and remediation policies.
• Work on integration with switches, wireless controllers, firewalls, DHCP, Active Directory/LDAP, RADIUS/TACACS+, and other network/security infrastructure.
• Troubleshoot 802.1X, MAC Authentication Bypass (MAB), VLAN assignment, and network access-related issues.
• Monitor NAC alerts, incidents, and endpoint activity and take appropriate corrective actions.
• Perform policy changes, rule tuning, configuration updates, and troubleshooting based on business requirements.
• Analyze logs and troubleshoot connectivity and NAC-related incidents.
• Coordinate with Network, Security, Service Desk, and OEM/vendor teams for complex issues.
• Participate in change implementation, testing, and post-change validation.
• Maintain technical documentation, SOPs, configuration records, and troubleshooting guides.
• Support security and compliance requirements related to endpoint access control.
• Participate in incident, problem, and change management processes.
• Provide support during planned maintenance activities and critical incidents.

Required Technical Skills

• Strong hands-on experience with Forescout NAC.
• Good understanding of Network Access Control concepts and endpoint profiling.
• Hands-on experience with Forescout policy configuration and troubleshooting.
• Strong knowledge of 802.1X and MAB authentication.
• Good understanding of VLANs, DHCP, DNS, TCP/IP, switching and routing fundamentals.
• Experience working with Cisco switches and enterprise network environments.
• Knowledge of RADIUS, TACACS+, Active Directory/LDAP and authentication mechanisms.
• Experience troubleshooting wired and wireless endpoint connectivity.
• Knowledge of network security concepts and endpoint compliance.
• Good understanding of network protocols and packet-flow troubleshooting.

Good to Have

• Forescout certification or relevant NAC certification.
• Experience with Cisco ISE or other NAC solutions.
• Knowledge of Palo Alto, Fortinet, Check Point, or other enterprise firewalls.
<
• Experience with SIEM/security monitoring tools.
• Knowledge of endpoint security and vulnerability management solutions.
• Experience working in large enterprise or data-center environments.

Candidate Profile

• Strong troubleshooting and analytical skills.
• Good understanding of enterprise networking and security.
• Ability to independently handle L2 incidents and troubleshoot complex NAC issues.
• Good communication and stakeholder-management skills.
• Comfortable working in a 24x7 support environment, including shifts/on-call support if required.
• Ability to coordinate effectively with internal teams, clients, and technology vendors.