Cyber Security Engineer

GDH; St. Louis (MO); Remote; USD 103,000 - 117,000; Full time

Job summary

GDH is seeking a Cybersecurity Engineer to configure, manage, and optimize NAC and C2C solutions across secure enterprise environments. You will focus on device discovery, posture checks, policy enforcement, and remediation while collaborating with cross-functional teams.

The role requires hands-on NAC experience (Forescout or Cisco ISE), integration with AD/SIEM, and scripting/automation capabilities. This is a remote role with travel across the continental US.

Qualifications

• 5 to 8 years of experience in cybersecurity or network security.
• 2+ years of experience managing NAC policies in production environments.
• Eligibility for a U.S. Government security clearance; U.S. citizenship required.
• Hands-on experience administering NAC solutions at enterprise scale using Forescout or Cisco ISE.
• Experience with security standards such as STIGs, SCAP, ACAS/Tenable, and endpoint security.
• Experience with scripting or automation using PowerShell, Python, REST APIs.

Responsibilities

• Configure, test, and optimize device discovery, classification, and interrogation in NAC.
• Develop, validate, and implement posture checks and automated remediation policies.
• Integrate NAC with endpoint security tools, AD, SIEM, and ticketing systems.
• Support monitoring, analyze policy failures, and fine-tune configurations.
• Lead phased enforcement and troubleshoot with network engineering; rollback procedures.
• Document exception devices and waiver processes; maintain runbooks and configurations.
• Support production environments under change control and security processes.
• Travel to multiple locations within the continental United States for deployment and ops.

Skills

NAC policies

802.1X/MAB/RADIUS

Active Directory/Group Policy

PKI/certificate-based authentication

PowerShell

Python

REST APIs

Scripting/automation

Education

Relevant education, training, certifications

Tools

Forescout

Cisco ISE

Job description

Role Summary

The Cybersecurity Engineer is responsible for configuring, managing, and optimizing Comply-to-Connect (C2C) and Network Access Control (NAC) solutions within secure enterprise environments. This role focuses on device discovery, classification, posture assessment, policy enforcement, and remediation. The position collaborates with cross‑functional teams to implement, validate, and support network access control strategies across multiple locations.

Responsibilities

• Configure, test, and optimize device discovery, classification, and interrogation processes within NAC environments.
• Develop, validate, and implement posture checks and automated remediation policies, beginning with controlled pilot groups before broader deployment.
• Integrate NAC solutions with endpoint security tools, Active Directory, SIEM, ticketing systems, and other enterprise security technologies.
• Support monitoring activities, analyze policy failures, and tune configurations to improve enforcement accuracy.
• Support phased enforcement activities and collaborate with network engineering teams to troubleshoot issues and execute rollback procedures when necessary.
• Identify, categorize, and document exception devices and support applicable exception or waiver processes.
• Maintain detailed documentation of configurations, policies, procedures, and operational runbooks.
• Support production environments operating under established change control and security processes.
• Collaborate with cross‑functional teams to support network security and device compliance.
• Travel to multiple locations within the continental United States to support deployment and operational activities.

Qualifications

• 5 to 8 years of experience in cybersecurity or network security, including 2+ years of experience managing NAC policies in production environments.
• This position requires eligibility for a U.S. Government security clearance. In accordance with federal law, U.S. citizenship is required.
• Hands‑on experience administering NAC solutions at enterprise scale using platforms such as Forescout or Cisco ISE.
• Strong knowledge of 802.1X, MAB, RADIUS, Active Directory/Group Policy, and PKI/certificate‑based authentication.
• Familiarity with security standards and technologies such as STIGs, SCAP, ACAS/Tenable, and endpoint security solutions.
• Experience with scripting or automation using PowerShell, Python, REST APIs, or similar technologies.
• Experience supporting secure production environments with established change control requirements.
• Ability and willingness to travel up to 75% to location within the continental United States.
• Relevant education, training, certifications, or equivalent practical experience.

Publishing Pay Range:

$75.00 – $85.00 USD Hourly

This is a fully remote role and can be performed from an approved location.