Network Security Engineer

Booz Allen Hamilton•San Diego, CA

14d

About The Position

As a Network Engineer specializing in Forescout, you will work alongside government and contractor engineers to deploy, integrate, and sustain enterprise Network Access Control (NAC) solutions supporting national security missions. You will use experience with Forescout, enterprise networking, and cybersecurity technologies to develop and implement access control policies, integrate security platforms, troubleshoot network and endpoint issues, and support Department of Defense Comply-to-Connect (C2C) initiatives. You will collaborate with engineering teams and stakeholders to design secure, scalable solutions that improve network visibility, endpoint compliance, and operational resilience. The role supports the security and reliability of enterprise network infrastructure and DoW missions.

Requirements

At least 5 years of experience in network engineering and security, including enterprise Network Access Control deployments.
Experience developing, implementing, and maintaining Forescout network access control policies.
Experience deploying, configuring, or maintaining Forescout CounterACT appliances in medium to large enterprise environments.
Experience integrating Forescout with enterprise IT security and network management systems.
Experience with security orchestration and automation technologies.
Knowledge of enterprise network infrastructure, security protocols, and network access control technologies.
Ability to develop technical documentation, implementation procedures, and engineering designs, and communicate effectively with technical teams and government stakeholders.
Active Secret clearance is required.
High school diploma or GED.
IAT Level II IA certification, such as Security+ CE or higher, and an Operating Environment certification, such as CCNA, CCNP, or Forescout certification.

Nice To Haves

Experience developing Forescout policies and administering Forescout modules, including CounterACT/eyeSight, eyeControl, Policy Manager, SecureConnector, and API integrations.
Experience implementing DoD Comply-to-Connect initiatives, including pilot deployments, production rollouts, and enterprise NAC integration.
Experience with multi-vendor NAC solutions, including Cisco ISE, Cisco Software-Defined Access, wireless NAC, and wireless controllers.
Knowledge of network authentication and access control technologies, including EAP-TLS, 802.1X, MAC Authentication Bypass, and RADIUS.
Knowledge of DoD cybersecurity standards, STIGs, Risk Management Framework, Authority to Operate processes, and Zero Trust principles aligned with NIST SP 800-53 and SP 800-207.
Experience integrating Forescout with endpoint security and management platforms, including HBSS/ESS, Trellix, CrowdStrike, Microsoft Defender, and Microsoft Intune.
Experience with network security automation using Python, PowerShell, REST APIs, or webhooks, including automated policy enforcement and OT/IoT device discovery and segmentation.
Forescout Certified Administrator, Forescout Certified Engineer, CISSP, CASP+, CCNP Enterprise/Security, or equivalent advanced network security certifications.

Responsibilities

Deploy, integrate, and sustain enterprise Network Access Control solutions.
Develop, implement, and maintain Forescout network access control policies.
Deploy, configure, and maintain Forescout CounterACT appliances.
Integrate Forescout with enterprise IT security and network management systems.
Troubleshoot complex network and endpoint issues.
Support Department of Defense Comply-to-Connect initiatives.
Collaborate with engineering teams and stakeholders to design secure, scalable solutions.
Develop technical documentation, implementation procedures, and engineering designs.