Forescout Engineer

Job Title: Forescout Engineer (Cyber Defense)

Location: Onsite - Washington, DC; Reston, VA; Quantico, VA; or College Park, MD.

Clearance: Active TS/SCI; must be able to obtain a Counterintelligence (CI) Polygraph.

Position Summary

As a Forescout Engineer, you will join an expert team focused on implementing andoperating next-generation security solutions for government and commercial clients.You will be responsible for the hands-on evaluation, implementation, and operation ofleading cyber defense tools. By applying in-depth defense strategies to large andcomplex networks, you will help identify vulnerabilities, prioritize response actions, anddevelop effective countermeasures to protect critical data from malicious actors.

Key Responsibilities

• Network Engineering: Architect and design IP networks, including developingand documenting network topologies.
• Perform physical and logical networkengineering, including port activation and configuration of switches, LANs, and VLANs.
• Security Operations: Engineer solutions for complex customer challenges usingknowledge of network engineering, system administration, and Active Directory.
• System Administration: Perform Windows and Linux administration, including troubleshooting, installation, configuration, and monitoring system performance.
• Maintenance & Support: Provide Tier II IT operations and maintenance support,including ticket updates, issue responses, and technical remediation.
• Continuous Improvement: Perform security upgrades and stay current withmulti-domain architectures (Data Center, WAN, and LAN) in virtualized environments.

Basic Qualifications

Professional Experience: Master's degree with 1+ year of IT project experience OR Bachelor's degree with 3+ years of IT project experience OR Associate's degree with 5+ years of IT project experience.

**Relevant years of experience may be accepted in lieu of a degree.

Certifications: DoD 8570 IAT Level II: (Security+ CE, CCNA-Security, GSEC,SSCP, CySA+, GICSP, or CND).DoD 8570 CSSP-Infrastructure Support: (CEH, CySA+, GICSP, SSCP,CHFI, CFR, Cloud+, or CND) - Must be obtained within 30 days of startdate.

Technical Skills: 1+ years of experience in system administration (Windows orLinux) and knowledge of network appliances or domain management serviceslike Active Directory.

Preferred Qualifications

• Forescout Expertise: Hands-on experience with the deployment, installation,and daily maintenance of Forescout CounterACT appliances in customer environments.
• Data Integration: Ability to integrate cybersecurity data using aggregation andanalysis tools, like Splunk.
• Compliance Knowledge: Familiarity with federal information security policies,standards (NIST/RMF), and authorization processes.
• Soft Skills: Ability to be a self-starter, work independently without heavy.
• Appliance Management: Hands-on ability to install, configure, and maintainphysical and virtual Forescout CounterACT appliances and the Enterprise
• Policy Engineering: Proficiency in creating and tuning policies forClassification (identifying what a device is), Clarification (determining whoowns it), and Compliance (checking if it meets security standards).
• Control Actions: Skills in implementing automated responses, such as movingnon-compliant devices to a Quarantine VLAN; or applying Access Control Lists(ACLs).
• Plugin Tuning: Ability to configure and optimize service plugins like the Host
• Property Scanner (HPS), Switch Plugin, and User Directory Plugin to ensureaccurate device profiling.

Key Professional Certifications (Sought After)

• FSCA (Forescout Certified Associate): Covers basic administration and policy creation
• FSCP (Forescout Certified Professional): Focuses on advancedtroubleshooting and plugin tuning.
• FSCE (Forescout Certified Engineer): The highest level, focusing on complexarchitecture and large-scale deployment design.