Forescout Network Engineer

Resource Management Concepts, Inc.•San Diego, CA

4d•$135,000 - $165,000•Onsite

About The Position

Resource Management Concepts, Inc. (RMC) is seeking a Forescout Network Engineer to support enterprise network infrastructure and network access control (NAC) capabilities at NIWC Pacific in San Diego, California. The position is on-site; remote candidates are not currently being considered. An active Secret clearance or higher is required. The engineer will design, implement, administer, and document secure, resilient NAC solutions for mission-critical workloads. This senior technical resource will provide Tier 4 support and collaborate with engineers, solution owners, and government stakeholders to strengthen network security, optimize performance, and support Navy requirements. The role also requires the ability to travel OCONUS approximately three times per year for one to three weeks per trip, generally with at least three months’ notice. RMC describes its mission as delivering exceptional management and technology solutions to help protect and preserve the people and environment of the United States. The company emphasizes employee career growth through training, certifications, and education. Salary is determined by factors including location, education, skills, experience, and contract-specific requirements; the stated annual range is $135,000 to $165,000.

Requirements

High school diploma or GED.
At least 8 years of network engineering and security experience, including enterprise network access control (NAC).
Hands-on experience developing Forescout policies and deploying or maintaining CounterACT appliances in medium to large enterprise environments.
Experience integrating Forescout with security and IT management platforms, including security orchestration and automation.
Strong troubleshooting, technical writing, and communication skills.
Active DoD Secret clearance or higher.
IAT Level II/CSWF compliance requires both an IA certification (Security+ CE or qualifying higher-level certification) and a relevant Operating Environment certification (such as CCNA, CCNP, CCIE, or a qualifying Forescout certification).
Ability to work on-site in San Diego and travel OCONUS approximately three times per year for one to three weeks per trip, generally with at least three months’ notice.

Nice To Haves

Advanced Forescout policy development and knowledge of CounterACT/eyeSight, eyeControl, Policy Manager, SecureConnector, and API integrations.
Knowledge of EAP-TLS, 802.1X, MAB, RADIUS, wireless NAC, and multivendor environments, including Cisco ISE/SDA.
Experience implementing DoD Comply-to-Connect (C2C) and transitioning pilots to production.
Familiarity with DoD security requirements, STIGs, RMF/ATO, Zero Trust, and NIST SP 800-53/800-207.
Experience designing IP networks and supporting OT/IoT discovery and segmentation.
Experience with endpoint security and management tools, such as HBSS/ESS, Trellix, CrowdStrike, Microsoft Defender, and Configuration Manager/Intune.
Python or PowerShell scripting and REST API/webhook automation experience.
Certifications such as FSCA, FSCE, CASP+, CISSP, CCNP Enterprise/Security, or Aruba/Juniper credentials.

Responsibilities

Design, implement, administer, and optimize Forescout NAC solutions across enterprise environments.
Develop, test, maintain, and troubleshoot Forescout policies for device discovery, endpoint visibility, access enforcement, and network segmentation.
Deploy, configure, and maintain Forescout CounterACT appliances and associated capabilities.
Develop and document NAC designs, hardened installation procedures, configuration standards, and operational guidance aligned with Navy requirements.
Provide Tier 4 troubleshooting for complex issues involving Forescout, network infrastructure, endpoint connectivity, and access control enforcement.
Integrate Forescout with IT security and management platforms to support coordinated policy enforcement, security orchestration, and automation.
Collaborate with engineers and solution owners to identify and implement appropriate access control strategies for mission-critical workloads.
Evaluate existing configurations and recommend improvements to security, reliability, scalability, and operational effectiveness.
Produce technical documentation and communicate technical findings, implementation plans, and recommendations to technical teams and government stakeholders.