Job Requirements
San Diego, CA
Secret Polygraph not specified
Mid Level Career (5+ yrs experience)
$100,000 - $145,600
Job Description
Network Engineer (Forescout)
Job Description
This role serves as a senior technical resource responsible for designing, implementing, supporting, and optimizing Forescout Network Access Control solutions within an enterprise NEN ESS environment. You will develop and manage Forescout policies, integrate NAC capabilities into a complex security stack, and act as a Tier IV escalation point for mission-critical network issues. The position is primarily on-site in San Diego and supports a long-term program with the opportunity to influence technical direction and solutions.
Responsibilities
Design, implement, and optimize Forescout Network Access Control solutions within the NEN ESS environment.
Develop, configure, and manage Forescout policies to support secure network access and compliance requirements.
Deploy, support, and maintain Forescout CounterACT appliances across enterprise network environments.
Integrate Forescout with existing security and management tools, including RADIUS and broader enterprise security stacks.
Perform advanced troubleshooting of NAC-related issues across network devices, endpoints, and mission-critical systems.
Support operational network issues as a Tier IV resource, providing expert-level guidance and resolution.
Design secure NAC solutions and processes that align with Zero Trust principles and DoD Comply-to-Connect initiatives.
Create and maintain technical documentation, implementation procedures, and best practices for NAC and related network solutions.
Collaborate closely with government stakeholders and internal teams to understand and support mission requirements.
Support and maintain enterprise network infrastructure, including Cisco networking platforms, routers, switches, wireless, and related technologies.
Contribute to security automation initiatives that enhance network visibility, control, and response capabilities.
Participate in on-site meetings, reviews, and working sessions to ensure alignment with program objectives and timelines.
Travel OCONUS up to three times annually, as needed, to support deployments, troubleshooting, or mission activities.
Essential Skills
8+ years of Network Engineering experience in enterprise environments.
Enterprise Network Access Control (NAC) experience.
Hands-on Forescout administration experience, including policy development and tuning.
Experience deploying and supporting Forescout CounterACT appliances.
Security automation experience related to network and NAC solutions.
Strong verbal and written communication skills, including the ability to create clear technical documentation.
High School Diploma or GED.
Active Secret Clearance or higher.
Ability to meet DoD IAT Level II requirements.
Security+ CE (or higher) certification.
CCNA, CCNP, CCIE, or equivalent OE certification.
Ability to travel OCONUS up to three times per year.
Ability to work on-site a minimum of two days per week in San Diego.
Experience supporting enterprise network environments and mission-critical systems.
Experience troubleshooting NAC-related issues across diverse network and endpoint environments.
Experience integrating Forescout into existing security stacks and RADIUS-based access control.
Proficiency with Cisco networking technologies, including routers, switches, and enterprise network architectures.
Additional Skills and Qualifications
Forescout Certified Administrator (FSCA).
Forescout Certified Engineer (FSCE).
CCNP Security certification.
Experience supporting DoD Comply-to-Connect (C2C) initiatives.
Strong understanding of Zero Trust architectures and their application to NAC solutions.
Experience with Cisco routers and switches in enterprise environments.
Experience with Palo Alto firewalls or similar next-generation firewall platforms.
Experience with BGP routing in complex network topologies.
Experience with enterprise wireless networking solutions.
Familiarity with Python for automation, scripting, or integration tasks.
Experience creating and maintaining technical documentation and best practices for network and NAC solutions.
Work Environment
This role is primarily on-site at a secure facility in San Diego, California, specifically at the NIWC Pacific Old Town Campus. The work model is predominantly on-site with a requirement to be in the office at least two days per week, supporting a large enterprise network and NAC environment. You will work with technologies such as Forescout CounterACT, Cisco routers and switches, Palo Alto firewalls, BGP, wireless infrastructure, RADIUS, and Python-based automation tools. The position supports a contract-based program with a defined term through at least 2027 and potential option years through 2031. The environment is mission-focused, structured, and collaborative, with occasional OCONUS travel (up to three trips annually) to support deployments and operational needs.
What's In It for You?
Own a highly specialized security platform by leading Forescout NAC engineering, architecture, and policy development across a large-scale enterprise environment.
Work at the intersection of networking and cybersecurity, gaining hands-on experience with Zero Trust, Comply-to-Connect (C2C), security automation, Cisco networking, Palo Alto firewalls, and enterprise security integrations.
Make a real mission impact as the Tier IV technical expert supporting mission-critical DoD networks and influencing technical direction alongside government stakeholders.
Build long-term career stability and growth on a funded program through at least 2027 (with potential through 2031), while developing in-demand Forescout, NAC, and enterprise security engineering expertise.
Job Description
This role serves as a senior technical resource responsible for designing, implementing, supporting, and optimizing Forescout Network Access Control solutions within an enterprise NEN ESS environment. You will develop and manage Forescout policies, integrate NAC capabilities into a complex security stack, and act as a Tier IV escalation point for mission-critical network issues. The position is primarily on-site in San Diego and supports a long-term program with the opportunity to influence technical direction and solutions.
Responsibilities
Design, implement, and optimize Forescout Network Access Control solutions within the NEN ESS environment.
Develop, configure, and manage Forescout policies to support secure network access and compliance requirements.
Deploy, support, and maintain Forescout CounterACT appliances across enterprise network environments.
Integrate Forescout with existing security and management tools, including RADIUS and broader enterprise security stacks.
Perform advanced troubleshooting of NAC-related issues across network devices, endpoints, and mission-critical systems.
Support operational network issues as a Tier IV resource, providing expert-level guidance and resolution.
Design secure NAC solutions and processes that align with Zero Trust principles and DoD Comply-to-Connect initiatives.
Create and maintain technical documentation, implementation procedures, and best practices for NAC and related network solutions.
Collaborate closely with government stakeholders and internal teams to understand and support mission requirements.
Support and maintain enterprise network infrastructure, including Cisco networking platforms, routers, switches, wireless, and related technologies.
Contribute to security automation initiatives that enhance network visibility, control, and response capabilities.
Participate in on-site meetings, reviews, and working sessions to ensure alignment with program objectives and timelines.
Travel OCONUS up to three times annually, as needed, to support deployments, troubleshooting, or mission activities.
Essential Skills
8+ years of Network Engineering experience in enterprise environments.
Enterprise Network Access Control (NAC) experience.
Hands-on Forescout administration experience, including policy development and tuning.
Experience deploying and supporting Forescout CounterACT appliances.
Security automation experience related to network and NAC solutions.
Strong verbal and written communication skills, including the ability to create clear technical documentation.
High School Diploma or GED.
Active Secret Clearance or higher.
Ability to meet DoD IAT Level II requirements.
Security+ CE (or higher) certification.
CCNA, CCNP, CCIE, or equivalent OE certification.
Ability to travel OCONUS up to three times per year.
Ability to work on-site a minimum of two days per week in San Diego.
Experience supporting enterprise network environments and mission-critical systems.
Experience troubleshooting NAC-related issues across diverse network and endpoint environments.
Experience integrating Forescout into existing security stacks and RADIUS-based access control.
Proficiency with Cisco networking technologies, including routers, switches, and enterprise network architectures.
Additional Skills and Qualifications
Forescout Certified Administrator (FSCA).
Forescout Certified Engineer (FSCE).
CCNP Security certification.
Experience supporting DoD Comply-to-Connect (C2C) initiatives.
Strong understanding of Zero Trust architectures and their application to NAC solutions.
Experience with Cisco routers and switches in enterprise environments.
Experience with Palo Alto firewalls or similar next-generation firewall platforms.
Experience with BGP routing in complex network topologies.
Experience with enterprise wireless networking solutions.
Familiarity with Python for automation, scripting, or integration tasks.
Experience creating and maintaining technical documentation and best practices for network and NAC solutions.
Work Environment
This role is primarily on-site at a secure facility in San Diego, California, specifically at the NIWC Pacific Old Town Campus. The work model is predominantly on-site with a requirement to be in the office at least two days per week, supporting a large enterprise network and NAC environment. You will work with technologies such as Forescout CounterACT, Cisco routers and switches, Palo Alto firewalls, BGP, wireless infrastructure, RADIUS, and Python-based automation tools. The position supports a contract-based program with a defined term through at least 2027 and potential option years through 2031. The environment is mission-focused, structured, and collaborative, with occasional OCONUS travel (up to three trips annually) to support deployments and operational needs.
What's In It for You?
Own a highly specialized security platform by leading Forescout NAC engineering, architecture, and policy development across a large-scale enterprise environment.
Work at the intersection of networking and cybersecurity, gaining hands-on experience with Zero Trust, Comply-to-Connect (C2C), security automation, Cisco networking, Palo Alto firewalls, and enterprise security integrations.
Make a real mission impact as the Tier IV technical expert supporting mission-critical DoD networks and influencing technical direction alongside government stakeholders.
Build long-term career stability and growth on a funded program through at least 2027 (with potential through 2031), while developing in-demand Forescout, NAC, and enterprise security engineering expertise.
group id: 10105424
