Cyber Security Engineer

Gdh Consulting, Inc.; St. Louis (MO); Remoto; USD 103.000 - 117.000; Tempo pieno

Descrizione del lavoro

GDH seeks a Cybersecurity Engineer to configure, manage, and optimize NAC and C2C solutions across secure enterprise environments. You will focus on device discovery, posture assessment, policy enforcement, and remediation, collaborating with cross-functional teams.

You will integrate NAC with AD, SIEM, and ticketing systems, support monitoring activities, and drive automated remediation. Expect travel up to 75% across the continental United States.

Competenze

• 5–8 years in cybersecurity or network security with 2+ years managing NAC policies in production.
• Eligible for U.S. Government security clearance; U.S. citizenship required.
• Hands-on NAC administration at enterprise scale (Forescout or Cisco ISE).
• Knowledge of 802.1X, MAB, RADIUS, AD/GP, PKI authentication; STIGs/SCAP.
• Experience with scripting (PowerShell, Python, REST APIs) and change control.

Mansioni

• Configure, test, and optimize device discovery, classification, and interrogation in NAC environments.
• Develop and implement posture checks and automated remediation policies.
• Integrate NAC with endpoint security tools, AD, SIEM, and ticketing systems.
• Monitor, analyze policy failures, and tune configurations for enforcement accuracy.
• Support phased enforcement, troubleshoot, and perform rollback procedures when needed.
• Document exceptions, waivers, configurations, and operational runbooks.
• Travel up to 75% to locations within the continental United States for deployment and support.

Conoscenze

NAC policy management

Cybersecurity experience

Enterprise networking

Scripting & automation

Formazione

Bachelor's degree in a related field

Strumenti

Forescout

Cisco ISE

Descrizione del lavoro

Role Summary

The Cybersecurity Engineer is responsible for configuring, managing, and optimizing Comply-to-Connect (C2C) and Network Access Control (NAC) solutions within secure enterprise environments. This role focuses on device discovery, classification, posture assessment, policy enforcement, and remediation. The position collaborates with cross-functional teams to implement, validate, and support network access control strategies across multiple locations.

Responsibilities

• Configure, test, and optimize device discovery, classification, and interrogation processes within NAC environments.
• Develop, validate, and implement posture checks and automated remediation policies, beginning with controlled pilot groups before broader deployment.
• Integrate NAC solutions with endpoint security tools, Active Directory, SIEM, ticketing systems, and other enterprise security technologies.
• Support monitoring activities, analyze policy failures, and tune configurations to improve enforcement accuracy.
• Support phased enforcement activities and collaborate with network engineering teams to troubleshoot issues and execute rollback procedures when necessary.
• Identify, categorize, and document exception devices and support applicable exception or waiver processes.
• Maintain detailed documentation of configurations, policies, procedures, and operational runbooks.
• Support production environments operating under established change control and security processes.
• Collaborate with cross-functional teams to support network security and device compliance.
• Travel to multiple locations within the continental United States to support deployment and operational activities.

Qualifications

• 5 to 8 years of experience in cybersecurity or network security, including 2+ years of experience managing NAC policies in production environments.
• This position requires eligibility for a U.S. Government security clearance.
• In accordance with federal law, U.S. citizenship is required.
• Hands-on experience administering NAC solutions at enterprise scale using platforms such as Forescout or Cisco ISE.
• Strong knowledge of 802.1X, MAB, RADIUS, Active Directory/Group Policy, and PKI/certificate-based authentication.
• Familiarity with security standards and technologies such as STIGs, SCAP, ACAS/Tenable, and endpoint security solutions.
• Experience with scripting or automation using PowerShell, Python, REST APIs, or similar technologies.
• Experience supporting secure production environments with established change control requirements.
• Ability and willingness to travel up to 75% to locations within the continental United States.
• Relevant education, training, certifications, or equivalent practical experience.

Pay Range

Publishing Pay Range: $75.00 - $85.00 USD Hourly This is a fully remote role and can be performed from an approved location.

About GDH

At GDH, we believe in the power of people and the importance of caring. Our culture statement, "We care about people," isn't just a tagline - it's the core of everything we do. GDH is a premier staffing and talent solutions company dedicated to helping businesses find the best talent and assisting job seekers in finding their dream jobs.

Who We Are

GDH, founded in 2001, has grown into a leader in providing staffing solutions across various industries. We specialize in IT across several sectors, connecting top talent with leading enterprises. As a Best of Staffing firm recognized for excellence in client, employee, talent, and women's services, we pride ourselves on our commitment to quality and service.

GDH Benefits

GDH offers a range of employee benefits that are designed to promote well-being and help maintain a healthy work-life balance. These comprehensive benefits cover various aspects of an employee's life and aim to enhance their overall experience with the company. Our health benefits include three medical insurance options with access to KISx Card, Zero Card, and HealthJoy concierge services. Other plan offerings include dental, vision, life, disability, supplemental insurance, and pet insurance plans. Enjoy additional perks like holiday pay, 401(k) plan, direct deposit, an employee referral program, work-life balance benefits, a Wellbeats membership, a discounted gym membership program, and more!

GDH provides equal employment opportunities (EEO) to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, gender, sex (including pregnancy), sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, ancestry, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable federal, state, and local laws. Applicants with disabilities who require an accommodation or assistance in applying and/or for interviewing, please contact our HR Department. Please visit our notice of collection for California applicants.