Senior Forescout Cyber Security Engineer

Ennoble First Inc.; Reston (VA); On-site; USD 160,000 - 195,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

Ennoble First is seeking a Senior Forescout Cyber Security Engineer to deploy, operate, and sustain enterprise NAC and device visibility. You will ensure continuous asset discovery, classification, policy enforcement, and Zero Trust monitoring across government environments.

You will collaborate with network, security operations, and platform teams to align security controls with enterprise tools. The role requires experience with Forescout, strong communications, and a focus on maintaining a

Qualifications

• Active TS/SCI clearance with polygraph eligibility.
• 5+ years of systems administration experience on Windows or Linux.
• Experience deploying/maintaining Forescout NAC platforms.

Responsibilities

• Develop relationships with cross-functional teams and communicate security concepts to diverse audiences.
• Manage infrastructure and cybersecurity controls, including vulnerability detection and event correlation.
• Conduct risk and vulnerability assessments across network, system, and app domains.
• Deploy, configure, operate, and sustain Forescout platforms for device discovery, classification, and NAC.
• Implement and maintain Zero Trust aligned policies and enforcement.
• Integrate Forescout with enterprise security tools (identity, endpoint security, vulnerability mgmt, SIEM, SOAR).
• Perform upgrades, patching, and lifecycle maintenance.
• Troubleshoot platform issues and visibility/enforcement gaps.
• Develop and maintain technical docs, runbooks, and SOPs.

Skills

Security engineering

Zero Trust

Network access control

Vulnerability assessment

Technical documentation

Education

DoD 8570 IAT Level III Certification

DoD CSSP-IS Certification

Bachelor's degree or higher in IT or related field

Tools

Forescout CounterACT

Splunk

SIEM platforms

Job description

Location

Location: Reston, VA or Washington, DC

Required Clearance: Active TS/SCI with Polygraph Eligibility

Employment Type: Full-Time Regular

Shift: Day

Travel: No

Relocation Assistance: Yes

Company Overview

We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important. Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver. There is no challenge we can't turn into an opportunity.

Position Overview

Ennoble First is seeking a Senior Forescout Cyber Security Engineer to support the deployment, operation, and sustainment of enterprise Network Access Control (NAC) and device visibility capabilities. This role focuses on implementing and maintaining Forescout platforms to enable continuous device discovery, classification, compliance enforcement, and Zero Trust monitoring across complex Government environments. The Senior Forescout Cyber Security Engineer works closely with network engineering, cybersecurity operations, and platform teams to ensure accurate asset visibility, policy enforcement, and integration with enterprise security toolchains.

Primary Responsibilities

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Contribute to risk and vulnerability assessments in network, system, and application areas, and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
• Deploy, configure, operate, and sustain Forescout platforms supporting device discovery, classification, and network access control.
• Implement and maintain compliance, posture assessment, and enforcement policies aligned with Zero Trust principles.
• Integrate Forescout with enterprise security technologies, including identity management, endpoint security, vulnerability management, SIEM, and SOAR platforms.
• Perform upgrades, patching, configuration changes, and lifecycle maintenance activities.
• Troubleshoot platform issues, visibility gaps, enforcement failures, and integration challenges.
• Develop and maintain technical documentation, runbooks, and operational procedures.

Required Qualifications

• 5+ years of experience performing systems administration for Windows or Linux, including performing basic troubleshooting and installation or configuration, monitoring system performance or availability, and performing security upgrades.
• Experience architecting and designing IP networks, including developing and documenting network topologies.
• Knowledge of multi-domain architectures, including data center, WAN, and LAN in virtualized architectures.
• Associate's degree and 10+ years of experience supporting IT projects and activities, Bachelor's degree and 8+ years of experience supporting IT projects and activities, or Master's degree and 6+ years of experience supporting IT projects and activities. Years of experience may be accepted in lieu of a degree.
• DoD 8570 Information Assurance Technician (IAT) Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP certification.
• DoD 8570 Cybersecurity Service Provider – Infrastructure Support (CSSP-IS) Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification.

Preferred Qualifications

• Experience with deployment or daily maintenance of Forescout CounterACT appliances.
• Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems.
• Ability to install and deploy Forescout in a customer environment.
• Ability to integrate Cybersecurity data using enterprise or custom tools data aggregation and analysis tools, including Splunk.
• Ability to provide support in a Tier II IT operations and maintenance role, including ticket work information updates, issue responses, and remediation.
• Ability to be a self-starter, work without considerable direction, and work with a team.
• Possession of excellent verbal and written communication skills, including coordinating efforts and establishing customer relations.

Clearance

• Active TS/SCI clearance with the ability to obtain a counter-intelligence polygraph.

Pay Range

$160,00-195,000

The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Equal Employment Opportunity

Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.

E-Verify Participation

Ennoble First participates in E-Verify. Learn more at www.dhs.gov/E-Verify.

Ennoble First is committed to providing a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Ennoble First participates in E-Verify.