Forescout Network Engineer

Location: NIWC Pacific Old Town Campus, San Diego, CA
Work Model: On-site; remote candidates are not currently being considered
Security Clearance: Active Secret clearance or higher required

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial customers. Our mission is to deliver exceptional management and technology solutions that help protect and preserve the people and environment of the United States.

RMC is seeking a Forescout Network Engineer to support enterprise network infrastructure and network access control (NAC) capabilities at NIWC Pacific in San Diego, CA. The selected candidate will bring extensive hands-on experience administering Forescout, developing NAC policies, and troubleshooting complex issues across network devices and endpoints.

This position will design, implement, and document secure, resilient NAC solutions for mission-critical workloads. The selected candidate will serve as a senior technical resource, providing Tier 4 support and collaborating with engineers, solution owners, and government stakeholders to strengthen network security, optimize performance, and support Navy requirements.

Responsibilities

• Design, implement, administer, and optimize Forescout NAC solutions across enterprise environments.
• Develop, test, maintain, and troubleshoot Forescout policies supporting device discovery, endpoint visibility, access enforcement, and network segmentation.
• Deploy, configure, and maintain Forescout CounterACT appliances and associated capabilities.
• Develop and document NAC designs, hardened installation procedures, configuration standards, and operational guidance aligned with Navy requirements.
• Provide Tier 4 troubleshooting for complex issues involving Forescout, network infrastructure, endpoint connectivity, and access control enforcement.
• Integrate Forescout with IT security and management platforms to support coordinated policy enforcement, security orchestration, and automation.
• Collaborate with engineers and solution owners to identify and implement appropriate access control strategies for mission-critical workloads.
• Evaluate existing configurations and recommend improvements to security, reliability, scalability, and operational effectiveness.
• Produce clear technical documentation and communicate technical findings, implementation plans, and recommendations to technical teams and government stakeholders.

• High school diploma or GED.
• 8+ years of network engineering and security experience, including enterprise network access control (NAC).
• Hands-on experience developing Forescout policies and deploying or maintaining CounterACT appliances in medium to large enterprise environments.
• Experience integrating Forescout with security and IT management platforms, including security orchestration and automation.
• Strong troubleshooting, technical writing, and communication skills.
• Active DoD Secret clearance or higher.
• IAT Level II/CSWF compliance requires both an IA certification (Security+ CE or qualifying higher-level certification) and a relevant Operating Environment certification (such as CCNA, CCNP, CCIE, or a qualifying Forescout certification).
• Ability to work on-site in San Diego and travel OCONUS approximately three times per year for one to three weeks per trip, generally with at least three months’ notice.

Desired Qualifications

• Advanced Forescout policy development and knowledge of CounterACT/eyeSight, eyeControl, Policy Manager, SecureConnector, and API integrations.
• Knowledge of EAP-TLS, 802.1X, MAB, RADIUS, wireless NAC, and multivendor environments, including Cisco ISE/SDA.
• Experience implementing DoD Comply-to-Connect (C2C) and transitioning pilots to production.
• Familiarity with DoD security requirements, STIGs, RMF/ATO, Zero Trust, and NIST SP 800-53/800-207.
• Experience designing IP networks and supporting OT/IoT discovery and segmentation.
• Experience with endpoint security and management tools, such as HBSS/ESS, Trellix, CrowdStrike, Microsoft Defender, and Configuration Manager/Intune.
• Python or PowerShell scripting and REST API/webhook automation experience.
• Certifications such as FSCA, FSCE, CASP+, CISSP, CCNP Enterprise/Security, or Aruba/Juniper credentials.

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The current salary range for this position will be $135,000 to $165,000 (annually).