Senior Forescout Cyber Security Engineer with Security Clearance

Ennoble First Inc.; Reston (VA); On-site; USD 160,000 - 195,000; Full time

Benefits offered by this job

Relocation assistance

Job summary

Ennoble First is seeking a Senior Forescout Cyber Security Engineer to support deployment, operation, and sustainment of enterprise NAC and device visibility. The role focuses on implementing Forescout platforms for continuous device discovery, classification, and Zero Trust monitoring across government environments.

The candidate will collaborate with network engineering, cybersecurity operations, and platform teams to ensure asset visibility, policy enforcement, and integration with security

Qualifications

• 5 years of experience performing systems administration for Windows or Linux.
• Experience architecting and designing IP networks.
• DoD 8570 IAT III Certification such as SecurityX, CCNP Security, CISA, CISSP, GCED, GCIH, or CCSP.
• DoD 8570 CSSP-IS Certification (CEH, CySA, GICSP, SSCP, CHFI, CFR, Cloud, or CND).
• Active TS/SCI clearance with the ability to obtain a polygraph.

Responsibilities

• Deploy, configure, operate, and sustain Forescout platforms for device discovery and NAC.
• Implement and maintain Zero Trust policies and compliance.
• Integrate Forescout with enterprise security technologies (identity management, endpoint security, vulnerability management, SIEM, SOAR).
• Develop technical documentation, runbooks, and operational procedures.
• Triage and troubleshoot platform issues and visibility gaps.

Skills

Cyber security engineering

Network security

Windows/Linux administration

Communication with leadership

Education

Bachelor's degree in IT or related field

10 years IT project experience or an advanced degree

Tools

Forescout CounterACT

Splunk

SIEM

SOAR platforms

Job description

Senior Forescout Cyber Security Engineer Location: Reston, VA or Washington, DC Required Clearance: Active TS/SCI with Polygraph Eligibility Employment Type: Full-Time Regular Shift: Day

• Travel: No
• Relocation Assistance: Yes

Company Overview We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important. Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver. There is no challenge we can't turn into an opportunity. Position Overview Ennoble First is seeking a Senior Forescout Cyber Security Engineer to support the deployment, operation, and sustainment of enterprise Network Access Control (NAC) and device visibility capabilities. This role focuses on implementing and maintaining Forescout platforms to enable continuous device discovery, classification, compliance enforcement, and Zero Trust monitoring across complex Government environments. The Senior Forescout Cyber Security Engineer works closely with network engineering, cybersecurity operations, and platform teams to ensure accurate asset visibility, policy enforcement, and integration with enterprise security toolchains. Primary Responsibilities

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Contribute to risk and vulnerability assessments in network, system, and application areas, and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.
• Deploy, configure, operate, and sustain Forescout platforms supporting device discovery, classification, and network access control.
• Implement and maintain compliance, posture assessment, and enforcement policies aligned with Zero Trust principles.
• Integrate Forescout with enterprise security technologies, including identity management, endpoint security, vulnerability management, SIEM, and SOAR platforms.
• Perform upgrades, patching, configuration changes, and lifecycle maintenance activities.
• Troubleshoot platform issues, visibility gaps, enforcement failures, and integration challenges.
• Develop and maintain technical documentation, runbooks, and operational procedures.
• Required Qualifications
• 5 years of experience performing systems administration for Windows or Linux, including performing basic troubleshooting and installation or configuration, monitoring system performance or availability, and performing security upgrades.
• Experience architecting and designing IP networks, including developing and documenting network topologies.
• Knowledge of multi-domain architectures, including data center, WAN, and LAN in virtualized architectures.
• Associate's degree and 10 years of experience supporting IT projects and activities, Bachelor's degree and 8 years of experience supporting IT projects and activities, or Master's degree and 6 years of experience supporting IT projects and activities. Years of experience may be accepted in lieu of a degree.
• DoD 8570 Information Assurance Technician (IAT) Level III Certification such as SecurityX (formerly CASP), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP certification.
• DoD 8570 Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) Certification, including CEH, CySA, GICSP, SSCP, CHFI, CFR, Cloud, or CND Certification. Preferred Qualifications
• Experience with deployment or daily maintenance of Forescout CounterACT appliances.
• Knowledge of federal information security policies, standards, procedures, directives, frameworks, federal security authorizations, assessment, and risk management processes for enterprise systems.
• Ability to install and deploy Forescout in a customer environment.
• Ability to integrate Cybersecurity data using enterprise or custom tools data aggregation and analysis tools, including Splunk.
• Ability to provide support in a Tier II IT operations and maintenance role, including ticket work information updates, issue responses, and remediation.
• Ability to be a self-starter, work without considerable direction, and work with a team.
• Possession of excellent verbal and written communication skills, including coordinating efforts and establishing customer relations. Clearance
• Active TS/SCI clearance with the ability to obtain a counter-intelligence polygraph. Pay Range $160,00-195,000 The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer includes (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. Equal Employment Opportunity Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law. E-Verify Participation Ennoble First participates in E-Verify. Learn more at www.dhs.gov/E-Verify . E-Verify is a registered trademark of the U.S. Department of Homeland Security. Ennoble First is committed to providing a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Ennoble First participates in E-Verify. The information below will be listed on our website's careers landing page. EEO is the Law | Pay Transparency www.dhs.gov/E-Verify E-Verify is a registered trademark of the U.S. Department of Homeland Security. This business uses E-Verify in its hiring practices to achieve a lawful workforce.