Forescout Network Engineer

Resource Management Concepts • San Diego, CA

4d • Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking a Forescout Network Engineer to support enterprise network infrastructure and network access control (NAC) capabilities at NIWC Pacific in San Diego, California. This on-site role requires an active Secret clearance or higher; remote candidates are not currently being considered.

The selected candidate will bring hands-on experience administering Forescout, developing NAC policies, and troubleshooting complex issues across network devices and endpoints. The position designs, implements, and documents secure, resilient NAC solutions for mission-critical workloads. As a senior technical resource, the engineer provides Tier 4 support and collaborates with engineers, solution owners, and government stakeholders to strengthen network security, optimize performance, and support Navy requirements.

The role requires the ability to work on-site in San Diego and travel overseas approximately three times per year for one to three weeks per trip, generally with at least three months’ notice. The annual salary range is $135,000 to $165,000. RMC states that salary depends on factors including location, education, skills, competencies, experience, and contract-specific requirements.

Requirements

• High school diploma or GED.
• At least 8 years of network engineering and security experience, including enterprise network access control (NAC).
• Hands-on experience developing Forescout policies and deploying or maintaining CounterACT appliances in medium to large enterprise environments.
• Experience integrating Forescout with security and IT management platforms, including security orchestration and automation.
• Strong troubleshooting, technical writing, and communication skills.
• Active DoD Secret clearance or higher.
• IAT Level II/CSWF compliance, requiring both an IA certification (Security+ CE or qualifying higher-level certification) and a relevant Operating Environment certification (such as CCNA, CCNP, CCIE, or a qualifying Forescout certification).
• Ability to work on-site in San Diego.
• Ability to travel OCONUS approximately three times per year for one to three weeks per trip, generally with at least three months’ notice.

Nice To Haves

• Advanced Forescout policy development and knowledge of CounterACT/eyeSight, eyeControl, Policy Manager, SecureConnector, and API integrations.
• Knowledge of EAP-TLS, 802.1X, MAB, RADIUS, wireless NAC, and multivendor environments, including Cisco ISE/SDA.
• Experience implementing DoD Comply-to-Connect (C2C) and transitioning pilots to production.
• Familiarity with DoD security requirements, STIGs, RMF/ATO, Zero Trust, and NIST SP 800-53/800-207.
• Experience designing IP networks and supporting OT/IoT discovery and segmentation.
• Experience with endpoint security and management tools such as HBSS/ESS, Trellix, CrowdStrike, Microsoft Defender, and Configuration Manager/Intune.
• Python or PowerShell scripting and REST API/webhook automation experience.
• Certifications such as FSCA, FSCE, CASP+, CISSP, CCNP Enterprise/Security, or Aruba/Juniper credentials.

Responsibilities

• Design, implement, administer, and optimize Forescout NAC solutions across enterprise environments.
• Develop, test, maintain, and troubleshoot Forescout policies supporting device discovery, endpoint visibility, access enforcement, and network segmentation.
• Deploy, configure, and maintain Forescout CounterACT appliances and associated capabilities.
• Develop and document NAC designs, hardened installation procedures, configuration standards, and operational guidance aligned with Navy requirements.
• Provide Tier 4 troubleshooting for complex issues involving Forescout, network infrastructure, endpoint connectivity, and access control enforcement.
• Integrate Forescout with IT security and management platforms to support coordinated policy enforcement, security orchestration, and automation.
• Collaborate with engineers and solution owners to identify and implement appropriate access control strategies for mission-critical workloads.
• Evaluate existing configurations and recommend improvements to security, reliability, scalability, and operational effectiveness.
• Produce technical documentation and communicate findings, implementation plans, and recommendations to technical teams and government stakeholders.

Benefits

• Career growth and employee investment through training, certification, and education.
• Tuition assistance.
• Certifications.
• Competitive paid vacation package.
• 11 paid federal holidays.
• High-quality, low-deductible healthcare plans.
• Pet insurance.
• Competitive 401K package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: High school or GED