Senior Forescout Engineer

Type of Requisition:

Regular

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Suitability:

Public Trust/Other Required:

NACI (T1)

Job Family:

Cyber Engineering

Job Qualifications:

Skills:

Cisco Routers and Switches, Documentations, ForeScout, Mitigation, Network Access Control (NAC)

Certifications:

Forescout Certified Administrator - Forescout

Experience:

5 + years of related experience

US Citizenship Required:

Yes

Job Description:

GDIT is currently seeking a Cybersecurity Engineer (Senior) with a focus area of Forescout Counteract, network access control (NAC) enforcement, and device compliance supporting the Department of Education's (DoED) Office of the Chief Information Officer (OCIO). The role will involve support of ForeScout CounterAct implementation as part of the DHS Continuous Diagnostics and Mitigation (CDM) program and OCIO security operations. The team member in this position should also have an understanding of networking and firewall. Normal tasks will include (but not limited to); maintaining and upgrading Forescout appliances, troubleshooting quarantined VLANs, expanding Forescout capabilities, and security stack integration. Serves as lead and subject matter expert in Forescout and network access control services and enforcement.

Responsiblities include:

• Maintain and support Forescout appliances on-prem and virtual machines in Azure cloud for an enterprise federal department.
• Support continuous diagnostics and mitigation (DHS CDM) integration and compliance for HWAM, SWAM, and CMS requirements utilizing Forescout.
• Troubleshoot various types of issues with the Forescout platforms (authentication, 802.1x, quarantine VLANs, network reachability, logging, etc.).
• Develop and maintain enforcement policies to comply with the Department's Vulnerability Management Remediation guidelines and CISA Known Exploitable Vulnerability (KEV) mandates (BOD 22-01).
• Develop and maintain enforcement and compliance dashboards.
• Prepare and maintain appropriate standard operational procedures (SOPs) and supporting documentation.
• Submit and respond to tickets using a central ticketing system such as ServiceNow.
• Submit, present, and implement change requests for regular maintenance and out-of-band emergency tasks.
• Understanding of router and switch configurations using CLI commands to verify communication with Forescout (i.e., 802.1x).
• Coordinate third-party maintenance for Foresout equipment and services.
• Other duties may include, packet capture and analysis support.
• Maintain and update diagrams for Forescout architecture using Microsoft Visio.
• Provide reports as needed using the Microsoft Office Suite.
• Provide outage notifications and update outage reports.
• Review IP addresses and subnets to identify networks that need to be monitored by Forescout.
• Perform network traces to analyze traffic issues.
• Provide specific detailed information for hardware and software selection, implementation techniques, and tools for the most efficient solution to meet business needs, including present and future capacity requirements.
• Propose solutions to management to ensure all communications requirements based on future needs and current usage, configuring such solutions to optimize cost savings.
• Provide regular monitoring and network analysis regarding short- and long-range planning.

EDUCATION AND EXPERIENCE: BA/BS or equivalent, 5+ years of experience

The likely salary range for this position is $119,000 - $161,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.

Scheduled Weekly Hours:

40

Travel Required:

Less than 10%

Telecommuting Options:

Hybrid

Work Location:

USA DC Home Office (DCHOME)

Additional Work Locations:

Total Rewards at GDIT:

Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most.

We are GDIT. A global technology and professional services company that delivers consulting, technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 30 countries worldwide, offering leading capabilities in digital modernization, AI/ML, Cloud, Cyber and application development. Together with our clients, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.

We connect people with the most impactful client missions, creating an unparalleled work experience that allows them to see their impact every day. We create opportunities for our people to lead and learn simultaneously. From securing our nation’s most sensitive systems, to enabling digital transformation and cloud adoption, our people are the ones who make change real.

GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.