Forescout Network Engineer

Boarhog LLC; San Diego (CA); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Competitive salary

Company 401K contribution

Paid vacation

Health savings account

HubZone stipend

Job summary

Boarhog seeks a seasoned Forescout Network Engineer to design and implement robust Network Access Control for Navy Enterprise Network support in San Diego, CA. You will develop policies, document best practices, and deliver Tier 4 troubleshooting within a fast-paced DoD environment.

The role requires 8+ years in network engineering/security, Forescout expertise, and DoD RMF/CISA-aligned practices. On-site collaboration with government stakeholders is expected, with occasional travel as directed.

Qualifications

• Eight or more years of professional network engineering and security experience.
• Hands-on Forescout deployment and NAC policy development.
• Experience integrating Forescout with IT security/management systems.
• DoD RMF/NIST-based policies and STIGs familiarity.

Responsibilities

• Design and document best-practice NAC strategies using Forescout.
• Develop hardened installation and configuration procedures aligned with Navy standards.
• Provide Tier 4 support for the operational network and collaborate with engineers and owners to implement optimal NAC.
• Travel on-site as required, including potential OCONUS engagements.

Skills

NAC engineering

Forescout policy development

Security orchestration

IT security integration

Policy deployment experience

Technical writing

Tools

ForeScout CounterACT

eyeSight

Policy Manager

SecureConnector

REST/webhooks

Python/PowerShell

Job description

Forescout Network EngineerBoarhog is in search of a Forescout Network Engineer to join our talented team delivering Navy Enterprise Network (NEN) Engineering Support Services on the NIWC Pacific Old Town Campus in San Diego, CA. The contract runs into July 2031 if all options are exercised.Our Network Engineer should have extensive hands-on experience administering Forescout and supporting network infrastructure across enterprise environments in order to be the go-to resource for troubleshooting, optimization, and resilient network access control designs in a fast-paced enterprise IT environment.RESPONSIBILITIES:Design and document best-practice network access control strategies for mission-critical workloads using Forescout,Develop hardened installation and configuration procedures aligned with Navy standards.Provide Tier 4 support to the operational network as needed, collaborating with engineers and solution owners to select and implement the optimal access control strategy for each workload.REQUIRED QUALIFICATIONS:Eight or more (8+) years of professional experience in network engineering and security, including enterprise NAC (Network Access Control) deploymentsPractical experience developing Forescout policyExperience with security orchestration and automation.Experience integrating Forescout with IT security and management systems.Experience with the deployment or maintenance of ForeScout CounterACT appliances in medium to large enterprise environments.Strong writing and communication skills; ability to produce clear technical documentation.High school diploma or GEDActive Secret level security clearance (or higher)IAT Level II certification: Requires both an IA Certification (e.g., Security+ CE, or higher) *AND* an Operating Environment (OE) Certification (Relevant Network / Forescout Cert, e.g., CCNA, CCNP, CCIE etc.) for CSWF compliance.Ability to support on site delivery and collaborate with government stakeholders minimum 2 day per week, with potential expansion as directed by the client.Willing and able to perform OCONUS Travel (typically 1-3 weeks trip duration, up to approx. 3 times a year, planned 3+months in advance)DESIRED QUALIFICATIONS:Advanced knowledge developing Forescout policy.Advanced knowledge of EAP-TLS, 802.1x, MAB, and RADIUS.Direct experience executing DoD Comply to Connect (C2C) programs and leading pilot to production rollouts.Knowledge of DoD information security policies, STIGs, standards, procedures, directives, frameworks, and risk management processes for enterprise systemsDeep familiarity with Forescout modules (CounterACT/eyeSight, eyeControl, Policy Manager, SecureConnector/agent), and API integrationsNAC (Network Access Control) experience across multiple vendors (Cisco ISE and SDA), including comparative policy designExperience with wireless NAC (Network Access Control) and wireless controllersExperience with HBSS/ESS, MDE/XDR (e.g., Trellix, CrowdStrike, Microsoft Defender), MCC/IntuneExperience architecting and designing IP networksFamiliarity with RMF and ATO processesExposure to Zero Trust principles (identity centric access, micro segmentation, least privilege) and NIST SP 800 53/800 207 alignmentRelevant certifications: ForeScout Certified Administrator (FSCA) or ForeScout Certified Engineer (FSCE) Certification , Security+ (DoD 8570/8140), CASP+, CISSP, CCNP Enterprise/Security, Aruba/Juniper certificationsExperience in OT/IoT device discovery and segmentationScripting for automation (Python/PowerShell), and experience with REST/webhooks to orchestrate policy actionsReside in a SBA HUBZone area (see SBA HUBZone map on the SBA website)BOARHOG BENEFITS:Boarhog has over 14 years of defense industrial base steady, controlled growth and profitability, offering our full-time associates a remarkable compensation package, including:A competitive salary and opportunities for additional compensation working special projects100% coverage of medical/ dental/ vision health premiums.Company 401K contribution.Paid vacation.Health savings account.Greater Self-DeterminationStipend for residing in a HUBZone location (https://maps.certify.sba.gov/hubzone/map).Relocation or small signing bonus, and earned performance bonus.We thrive in a welcoming culture within a completely flat organization (and we mean flat... there is no organization chart. There is no CEO, no President, or VPs or even Supervisors populating an industrial age pyramid watching others do work); and that affords unparalleled self-determination and greater autonomy. Associates work directly for the Managing Member who is also a co-owner and founder. Nobody has ever and will ever make a living watching other associates do work. We have a vested interest in our associates' personal and professional goals and aspirations, communicated by each of the 42 associates in 7 states to the Managing Member, who retired from active duty after 21 years as an unrestricted line Surface Warfare Officer and Department of the Navy Acquisition Professional. He actively engages in day-to-day operations, to include recruiting and hiring, and knows the company's clients. We take pride in the resulting exceedingly low associate turnover rate. Pigs in the breakfast with skin-in-the-game is the story behind our logo (see https://www.boarhoglllc.com). Maybe you have what it takes to join us!E04JI800rmcl409g19g