Forescout Network Engineer

Job Description

Job Description

Forescout Network Engineer

Boarhog is in search of a Forescout Network Engineer to join our talented team delivering Navy Enterprise Network (NEN) Engineering Support Services on the NIWC Pacific Old Town Campus in San Diego, CA. The contract runs into July 2031 if all options are exercised.

Our Network Engineer should have extensive hands-on experience administering Forescout and supporting network infrastructure across enterprise environments in order to be the go-to resource for troubleshooting, optimization, and resilient network access control designs in a fast-paced enterprise IT environment.

RESPONSIBILITIES:

• Design and document best-practice network access control strategies for mission-critical workloads using Forescout,
• Develop hardened installation and configuration procedures aligned with Navy standards.
• Provide Tier 4 support to the operational network as needed, collaborating with engineers and solution owners to select and implement the optimal access control strategy for each workload.

REQUIRED QUALIFICATIONS :

• Eight or more (8+) years of professional experience in network engineering and security, including enterprise NAC (Network Access Control) deployments
• Practical experience developing Forescout policy
• Experience with security orchestration and automation.
• Experience integrating Forescout with IT security and management systems.
• Experience with the deployment or maintenance of ForeScout CounterACT appliances in medium to large enterprise environments.
• Strong writing and communication skills; ability to produce clear technical documentation.
• High school diploma or GED
• Active Secret level security clearance (or higher)
• IAT Level II certification :  Requires both an IA Certification (e.g., Security+ CE, or higher) *AND* an Operating Environment (OE) Certification (Relevant Network / Forescout Cert, e.g., CCNA, CCNP, CCIE etc.) for CSWF compliance.
• Ability to support on site delivery and collaborate with government stakeholders minimum 2 day per week , with potential expansion as directed by the client.
• Willing and able to perform OCONUS Travel (typically 1-3 weeks trip duration, up to approx. 3 times a year, planned 3+months in advance)

DESIRED QUALIFICATIONS :

• Advanced knowledge developing Forescout policy.
• Advanced knowledge of EAP-TLS, 802.1x, MAB, and RADIUS.
• Direct experience executing DoD Comply to Connect (C2C) programs and leading pilot to production rollouts.
• Knowledge of DoD information security policies, STIGs, standards, procedures, directives, frameworks, and risk management processes for enterprise systems
• Deep familiarity with Forescout modules (CounterACT/eyeSight, eyeControl, Policy Manager, SecureConnector/agent), and API integrations
• NAC (Network Access Control) experience across multiple vendors (Cisco ISE and SDA), including comparative policy design
• Experience with wireless NAC (Network Access Control) and wireless controllers
• Experience with HBSS/ESS, MDE/XDR (e.g., Trellix, CrowdStrike, Microsoft Defender), MCC/Intune
• Experience architecting and designing IP networks
• Familiarity with RMF and ATO processes
• Exposure to Zero Trust principles (identity centric access, micro segmentation, least privilege) and NIST SP 800 53/800 207 alignment
• Relevant certifications: ForeScout Certified Administrator (FSCA) or ForeScout Certified Engineer (FSCE) Certification , Security+ (DoD 8570/8140), CASP+, CISSP, CCNP Enterprise/Security, Aruba/Juniper certifications
• Experience in OT/IoT device discovery and segmentation
• Scripting for automation (Python/PowerShell), and experience with REST/webhooks to orchestrate policy actions
• Reside in a SBA HUBZone area (see SBA HUBZone map on the SBA website)

BOARHOG BENEFITS :

Boarhog has over 14 years of defense industrial base steady, controlled growth and profitability, offering our full-time associates a remarkable compensation package, including:

• A competitive salary and opportunities for additional compensation working special projects
• 100% coverage of medical/ dental/ vision health premiums.
• Company 401K contribution.
• Paid vacation.
• Health savings account.
• Greater Self-Determination
• Stipend for residing in a HUBZone location (
• Relocation or small signing bonus, and earned performance bonus.

We thrive in a welcoming culture within a completely flat organization (and we mean flat... there is no organization chart. There is no CEO, no President, or VPs or even Supervisors populating an industrial age pyramid watching others do work); and that affords unparalleled self-determination and greater autonomy. Associates work directly for the Managing Member who is also a co-owner and founder. Nobody has ever and will ever make a living watching other associates do work. We have a vested interest in our associates' personal and professional goals and aspirations, communicated by each of the 42 associates in 7 states to the Managing Member, who retired from active duty after 21 years as an unrestricted line Surface Warfare Officer and Department of the Navy Acquisition Professional. He actively engages in day-to-day operations, to include recruiting and hiring, and knows the company's clients. We take pride in the resulting exceedingly low associate turnover rate. Pigs in the breakfast with skin-in-the-game is the story behind our logo (see Maybe you have what it takes to join us!

E04JI800rmcl409g19g