Remote Cybersecurity Engineer - NAC & Policy Automation

GDH; St. Louis (MO); Remote; USD 103,000 - 117,000; Full time

Job summary

GDH is seeking a Cybersecurity Engineer to configure, manage, and optimize NAC and C2C solutions across secure enterprise environments. You will focus on device discovery, posture checks, policy enforcement, and remediation while collaborating with cross-functional teams.

The role requires hands-on NAC experience (Forescout or Cisco ISE), integration with AD/SIEM, and scripting/automation capabilities. This is a remote role with travel across the continental US.

Qualifications

• 5 to 8 years of experience in cybersecurity or network security.
• 2+ years of experience managing NAC policies in production environments.
• Eligibility for a U.S. Government security clearance; U.S. citizenship required.
• Hands-on experience administering NAC solutions at enterprise scale using Forescout or Cisco ISE.
• Experience with security standards such as STIGs, SCAP, ACAS/Tenable, and endpoint security.
• Experience with scripting or automation using PowerShell, Python, REST APIs.

Responsibilities

• Configure, test, and optimize device discovery, classification, and interrogation in NAC.
• Develop, validate, and implement posture checks and automated remediation policies.
• Integrate NAC with endpoint security tools, AD, SIEM, and ticketing systems.
• Support monitoring, analyze policy failures, and fine-tune configurations.
• Lead phased enforcement and troubleshoot with network engineering; rollback procedures.
• Document exception devices and waiver processes; maintain runbooks and configurations.
• Support production environments under change control and security processes.
• Travel to multiple locations within the continental United States for deployment and ops.

Skills

NAC policies

802.1X/MAB/RADIUS

Active Directory/Group Policy

PKI/certificate-based authentication

PowerShell

Python

REST APIs

Scripting/automation

Education

Relevant education, training, certifications

Tools

Forescout

Cisco ISE

Job description

GDH is seeking a Cybersecurity Engineer to configure, manage, and optimize NAC and C2C solutions across secure enterprise environments. You will focus on device discovery, posture checks, policy enforcement, and remediation while collaborating with cross-functional teams.

The role requires hands-on NAC experience (Forescout or Cisco ISE), integration with AD/SIEM, and scripting/automation capabilities. This is a remote role with travel across the continental US.