Forescout Network Engineer

RMC - Resource Management Concepts Inc.; San Diego (CA); Presencial; USD 135.000 - 165.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Health insurance

401K

Paid holidays

Pet insurance

Tuition assistance

Descripción de la vacante

Resource Management Concepts, Inc. (RMC) is seeking a Forescout Network Engineer to support NIWC Pacific in San Diego, CA. This on-site role requires Active Secret clearance or higher and focuses on deploying and maintaining Forescout NAC solutions across enterprise networks.

You will design NAC policies, troubleshoot complex issues, and collaborate with government stakeholders to strengthen network security and compliance for Navy workloads.

Formación

• 8+ years of network engineering and security experience, including enterprise NAC.
• Hands-on experience developing Forescout policies and deploying CounterACT appliances.
• Experience integrating Forescout with security and IT management platforms (SOAR/automation).
• Strong troubleshooting, technical writing, and communication skills.
• Active DoD Secret clearance or higher.
• IAT Level II/CSWF requires both an IA certification and an operating environment certification.
• Ability to work on-site in San Diego and travel OCONUS ~3 times per year.

Responsabilidades

• Design, implement, administer, and optimize Forescout NAC across enterprise environments.
• Develop, test, maintain, and troubleshoot Forescout policies for device discovery and access enforcement.
• Deploy, configure, and maintain Forescout CounterACT appliances.
• Document NAC designs, installation procedures, and operation guides per Navy requirements.
• Provide Tier 4 troubleshooting for complex Forescout and network issues.
• Integrate Forescout with security and management platforms for policy enforcement and automation.
• Collaborate with engineers to implement access control for mission-critical workloads.
• Evaluate configurations and recommend improvements for security and reliability.
• Produce clear technical documentation and communicate findings to teams and stakeholders.

Conocimientos

Troubleshooting

Technical writing

Communication

Forescout policy development

REST API/webhook automation

Herramientas

Forescout CounterACT

eyeSight

eyeControl

Policy Manager

SecureConnector

API integrations

HBSS/ESS

Trellix

CrowdStrike

Microsoft Defender

Configuration Manager/Intune

Cisco ISE/SDA

Descripción del empleo

Position Title: Forescout Network Engineer

Location: San Diego, California, United States

Department: Information Technology

Work Type: Full time

Workplace Type: On-site

Description

Location: NIWC Pacific Old Town Campus, San Diego, CA
Work Model: On-site; remote candidates are not currently being considered
Security Clearance: Active Secret clearance or higher required

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial customers. Our mission is to deliver exceptional management and technology solutions that help protect and preserve the people and environment of the United States.

RMC is seeking a Forescout Network Engineer to support enterprise network infrastructure and network access control (NAC) capabilities at NIWC Pacific in San Diego, CA. The selected candidate will bring extensive hands‑on experience administering Forescout, developing NAC policies, and troubleshooting complex issues across network devices and endpoints.

This position will design, implement, and document secure, resilient NAC solutions for mission‑critical workloads. The selected candidate will serve as a senior technical resource, providing Tier 4 support and collaborating with engineers, solution owners, and government stakeholders to strengthen network security, optimize performance, and support Navy requirements.

Responsibilities

• Design, implement, administer, and optimize Forescout NAC solutions across enterprise environments.
• Develop, test, maintain, and troubleshoot Forescout policies supporting device discovery, endpoint visibility, access enforcement, and network segmentation.
• Deploy, configure, and maintain Forescout CounterACT appliances and associated capabilities.
• Develop and document NAC designs, hardened installation procedures, configuration standards, and operational guidance aligned with Navy requirements.
• Provide Tier 4 troubleshooting for complex issues involving Forescout, network infrastructure, endpoint connectivity, and access control enforcement.
• Integrate Forescout with IT security and management platforms to support coordinated policy enforcement, security orchestration, and automation.
• Collaborate with engineers and solution owners to identify and implement appropriate access control strategies for mission‑critical workloads.
• Evaluate existing configurations and recommend improvements to security, reliability, scalability, and operational effectiveness.
• Produce clear technical documentation and communicate technical findings, implementation plans, and recommendations to technical teams and government stakeholders.

Requirements

• High school diploma or GED.
• 8+ years of network engineering and security experience, including enterprise network access control (NAC).
• Hands‑on experience developing Forescout policies and deploying or maintaining CounterACT appliances in medium to large enterprise environments.
• Experience integrating Forescout with security and IT management platforms, including security orchestration and automation.
• Strong troubleshooting, technical writing, and communication skills.
• Active DoD Secret clearance or higher.
• IAT Level II/CSWF compliance requires both an IA certification (Security+ CE or qualifying higher‑level certification) and a relevant Operating Environment certification (such as CCNA, CCNP, CCIE, or a qualifying Forescout certification).
• Ability to work on‑site in San Diego and travel OCONUS approximately three times per year for one to three weeks per trip, generally with at least three months' notice.

Desired Qualifications

• Advanced Forescout policy development and knowledge of CounterACT/eyeSight, eyeControl, Policy Manager, SecureConnector, and API integrations.
• Knowledge of EAP‑TLS, 802.1X, MAB, RADIUS, wireless NAC, and multivendor environments, including Cisco ISE/SDA.
• Experience implementing DoD Comply‑to‑Connect (C2C) and transitioning pilots to production.
• Familiarity with DoD security requirements, STIGs, RMF/ATO, Zero Trust, and NIST SP 800‑53/800‑207.
• Experience designing IP networks and supporting OT/IoT discovery and segmentation.
• Experience with endpoint security and management tools, such as HBSS/ESS, Trellix, CrowdStrike, Microsoft Defender, and Configuration Manager/Intune.
• Python or PowerShell scripting and REST API/webhook automation experience.
• Certifications such as FSCA, FSCE, CASP+, CISSP, CCNP Enterprise/Security, or Aruba/Juniper credentials.

Benefits

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low‑deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract‑specific requirements. The current salary range for this position will be $135,000 to $165,000 (annually).