Job Description:

• Provide Forescout Subject Matter Expertise services to customers including, product deployment, configuration, health checks, optimization, training, and troubleshooting.

• Implement, install, and troubleshoot Forescout, including the development of custom content, monitoring system health, performing upgrades/updates, and ensuring proper operation of physical & virtual appliances.

• Assist Security Engineers in the proper application of vulnerability scanning technologies across a network environment

• Work with Engineers to troubleshoot network connectivity issues including running WireShark, interfacing with various operation organizations to isolate faults and submitting/verifying firewall change requests

• Document the network configurations of solution elements including creating drawings and text descriptions

• Proactively identify and prioritize issues on behalf of the customer, communicate and explain issues to customer verbally or in writing, develop plans to address issues, get approval for plans, and drive plans to successful completion.

• Assist customer business units with implementation plans and network designs.

• Assist Firewall and VPN team in upgrade and deployment of security equipment

• Coordinate and lead meetings and provide written summaries.

• Collaborate with customer regarding deployment techniques, feature requests, and product issues.

• Provide regular progress reports on deployment, performance, open issues internally and with vendors integrating with customer Forescout installation

Responsibilities:

• Experience with design and configuration of Forescout products

• Understanding of enterprise computing environments, distributed applications, and strong knowledge and understanding of TCP/IP networks to include Cisco ASA, Palo Alto firewalls, and Avaya/Nortel switches

• Knowledge of TCP/IP and enterprise network protocols (LDAP, DNS, SMTP, SNMP, DHCP, and authentication protocols)

• Hands-on experience in both Windows and Linux, Mac OSX platforms with a solid understanding of networking principals and security best practices

• Understanding of the system hardening processes, tools, guidelines, and benchmarks

• Computer Networking Systems Administrator’s level Knowledge of all protocol layers

• Expertise in debugging and root-cause analysis in complex systems and large environments

• Understating of programming languages: Java, and Perl

• Strong experience in network troubleshooting and configuration (tcpdump, Wireshark, etc.)

• Knowledge of Network equipment configuration (Switch, Router, Firewall)

• Linux O/S installation, security configuration, and management

• Hands-on experience with Forescout solutions (preferred).

• Working knowledge of Linux/UNIX, and Windows operating systems.

• Virtualization environments for both desktop and server deployments

• Ability to gather, analyze, and interpret data in order to efficiently and effectively take action

• Working knowledge of industry security standards, procedures and technologies.

• Demonstrated excellent oral and written communications, including presentation skills for audiences of varying levels of technical understanding.

• Ability to constructively handle and address customer concerns through explanation or management escalation.

• A self-motivated individual with a ‘can do’ attitude.

• Ability to work independently in a mix of workplace environments including large enterprise, commercial, and military / government agency customers.

• Network security analysis and/or ICS networking experience

• Experience in network security principles and standards

• Experience in enterprise-level customer interaction with a strong customer support attitude

• Strong knowledge and experience working in a geographically distributed team-based engineering environment

• Bachelor’s degree in Computer Science, Engineering, or equivalent industry experience

Requirements:

• Fine-tune Forescout, CounterACT Policies, and module integrations for scalability, and performance improvements.

• Integrate and troubleshoot several technologies which included, but not limited to Linux, Layer 2 & Layer 3 network devices, Mobile and WiFi solutions, Enterprise Antivirus solutions, SNMP versions 1, 2, & 3, and 802.1x

• Configure and design networks capable of network traffic replication to NAC, IDS/IPS systems using port mirroring (Cisco SPAN), VLANs, ACLs, and network taps

• Build SQL queries, and LDAP queries to integrate with CounterACT.

• Build Domain Controllers, SQL servers, NPS servers, DNS Servers, DHCP servers, and File Servers.

• Design and implement automated access control-based policies on trusted VS non trusted devices, compliance level, and endpoint device type using dynamic access lists, VLAN changes, and virtual firewall

• Facilitate knowledge transfers to potential customers and influenced CounterAct implementation expansions.

• Provide real-time reports which included device inventories and compliance status

• Work with Project Managers, Security Engineers, Network Engineers, Systems Administrators, and Compliance team to implement the CounterAct NAC appliance to enterprise environments to ensure network compliance.