Senior Forescout Cyber Security Engineer

Ennoble First Inc.; Reston (VA); On-site; USD 160,000 - 195,000; Full time

Job summary

Ennoble First is seeking a Senior Forescout Cyber Security Engineer to deploy and sustain enterprise NAC and device visibility across complex government environments.

You will collaborate with network and security teams to ensure asset visibility, policy enforcement, and integration with security toolchains, while advancing Zero Trust principles and ongoing platform enhancements.

Qualifications

• 5+ years of systems administration for Windows or Linux with basic troubleshooting and security upgrades.
• Experience architecting and designing IP networks with documented topologies.
• Knowledge of multi-domain data center, WAN, and LAN in virtualized architectures.
• DoD 8570 IAT III certification such as SecurityX, CCNP Security, CISSP, CCSP, etc.
• DoD 8570 CSSP-IS certifications (CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+ or CND).
• Degrees may be substituted for experience per policy.

Responsibilities

• Develop relationships across teams and communicate security concepts to varied audiences.
• Manage infrastructure and cybersecurity controls with enhanced detection and correlation.
• Contribute to risk and vulnerability assessments across network, system, and application areas.
• Deploy, configure, operate, and sustain Forescout platforms for device discovery and NAC.
• Implement and maintain Zero Trust aligned compliance and posture policies.
• Integrate Forescout with enterprise security tools (identity, endpoint, vulnerability, SIEM, SOAR).
• Perform upgrades, patches, configuration changes, and lifecycle maintenance.
• Troubleshoot platform issues and visibility/enforcement gaps.
• Create and maintain runbooks and operational documentation.

Skills

Systems administration

Windows

Linux

Network design

Education

Associate's degree

Bachelor's degree

Master's degree

Tools

Forescout CounterACT

Splunk

Job description

Location: Reston, VA or Washington, DC

Required Clearance: Active TS/SCI with Polygraph Eligibility

Employment Type: Full-Time Regular

Shift: Day

Travel: No

Relocation Assistance: Yes

Company Overview

We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important. Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver. There is no challenge we can't turn into an opportunity.

Position Overview

Ennoble First is seeking a Senior Forescout Cyber Security Engineer to support the deployment, operation, and sustainment of enterprise Network Access Control (NAC) and device visibility capabilities. This role focuses on implementing and maintaining Forescout platforms to enable continuous device discovery, classification, compliance enforcement, and Zero Trust monitoring across complex Government environments.

The Senior Forescout Cyber Security Engineer works closely with network engineering, cybersecurity operations, and platform teams to ensure accurate asset visibility, policy enforcement, and integration with enterprise security toolchains.

Primary Responsibilities

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Contribute to risk and vulnerability assessments in network, system, and application areas, and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
• Deploy, configure, operate, and sustain Forescout platforms supporting device discovery, classification, and network access control.
• Implement and maintain compliance, posture assessment, and enforcement policies aligned with Zero Trust principles.
• Integrate Forescout with enterprise security technologies, including identity management, endpoint security, vulnerability management, SIEM, and SOAR platforms.
• Perform upgrades, patching, configuration changes, and lifecycle maintenance activities.
• Troubleshoot platform issues, visibility gaps, enforcement failures, and integration challenges.
• Develop and maintain technical documentation, runbooks, and operational procedures.

Required Qualifications

• 5+ years of experience performing systems administration for Windows or Linux, including performing basic troubleshooting and installation or configuration, monitoring system performance or availability, and performing security upgrades.
• Experience architecting and designing IP networks, including developing and documenting network topologies.
• Knowledge of multi-domain architectures, including data center, WAN, and LAN in virtualized architectures.
• Associate's degree and 10+ years of experience supporting IT projects and activities, Bachelor's degree and 8+ years of experience supporting IT projects and activities, or Master's degree and 6+ years of experience supporting IT projects and activities. Years of experience may be accepted in lieu of a degree.
• DoD 8570 Information Assurance Technician (IAT) Level III Certification such as SecurityX (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP certification.
• DoD 8570 Cybersecurity Service Provider – Infrastructure Support (CSSP-IS) Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification.

Preferred Qualifications

• Experience with deployment or daily maintenance of Forescout CounterACT appliances.
• Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems.
• Ability to install and deploy Forescout in a customer environment.
• Ability to integrate Cybersecurity data using enterprise or custom tools data aggregation and analysis tools, including Splunk.
• Ability to provide support in a Tier II IT operations and maintenance role, including ticket work information updates, issue responses, and remediation.
• Ability to be a self-starter, work without considerable direction, and work with a team.
• Possession of excellent verbal and written communication skills, including coordinating efforts and establishing customer relations.

Clearance

• Active TS/SCI clearance with the ability to obtain a counter-intelligence polygraph.

Pay Range

$160,00-195,000

The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Equal Employment Opportunity

Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law.

E-Verify Participation

Ennoble First participates in E-Verify. Learn more at www.dhs.gov/E-Verify.

E-Verify is a registered trademark of the U.S. Department of Homeland Security.

EEO is the Law | Pay Transparency Nondiscrimination

Ennoble First is committed to providing a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.