Job Description :
Title: Forescout Admin
Location: NYC, NY
Job Type: 12 months
Description:
Job Responsibilities:
Provide Forescout Subject Matter Expertise services to customers including, product deployment, configuration, health checks, optimization, training and troubleshooting.
Implement, install and troubleshoot Forescout, including the development of custom content, monitoring system health, performing upgrades/updates, and ensuring proper operation of physical & virtual appliances.
Assist Security Engineers in the proper application of vulnerability scanning technologies across a network environment
Work with Engineers to troubleshoot network connectivity issues including running WireShark, interfacing with various operation organizations to isolate faults and submitting/verifying firewall change requests
Document the network configurations of solution elements including creating drawings and text descriptions
Proactively identify and prioritize issues on behalf of the customer, communicate and explain issues to customer verbally or in writing, develop plans to address issues, get approval for plans, and drive plans to successful completion.
Assist customer business units with implementation plans and network designs.
Coordinate and lead meetings and provide written summaries.
Collaborate with customer regarding deployment techniques, feature requests, and product issues.
Provide regular progress reports on deployment, performance, open issues internally and with vendors integrating with customer Forescout installation
Technical Qualifications:
Experience with design and configuration of Forescout products
Understanding of enterprise computing environments, distributed applications, and strong knowledge and understanding of TCP/IP networks to include ASA, Palo Alto firewalls, and Cisco, Juniper, Avaya/Nortel switches
Knowledge of TCP/IP and enterprise network protocols (LDAP, DNS, SMTP, SNMP, DHCP, and authentication protocols)
Hands-on experience in both Windows and Linux, Mac OSX platforms with a solid understanding of networking principals and security best practices
Understanding of the system hardening processes, tools, guidelines, and benchmarks
Computer Networking Systems Administrator''s level Knowledge of all protocol layers
Expertise in debugging and root-cause analysis in complex systems and large environments
Understating of programming languages: Java, and Perl
Strong experience in network troubleshooting and configuration (tcpdump, Wireshark, etc
Network equipment configuration (Switch, Router, Firewall)
Linux O/S (Ubuntu and CentOS) installation, security configuration, and management
Hands-on experience with Forescout solutions (preferred
Working knowledge of Linux/UNIX, and Windows operating systems.
Virtualization environments for both desktop and server deployments
Ability to gather, analyze, and interpret data in order to efficiently and effectively take action
Working knowledge of industry security standards, procedures and technologies.
Demonstrated excellent oral and written communications, including presentation skills for audiences of varying levels of technical understanding.
Ability to constructively handle and address customer concerns through explanation or management escalation.
A self-motivated individual with a ''can do'' attitude.
Ability to work independently in a mix of workplace environments including large enterprise, commercial, and military / government agency customers.
Network security analysis and/or ICS networking experience
Experience in network security principles and standards
Experience in enterprise-level customer interaction with a strong customer support attitude
Strong knowledge and experience working in a geographically distributed team-based engineering environment
Bachelor''s degree in Computer Science, Engineering, or equivalent industry experience
Must Have Hands-On Technical Experience:
Fine-tune CounterACT Policies, and module integrations for scalability, and performance improvements
Integrate and troubleshoot several technologies which included, but not limited to Linux CentOS, Layer 2 & Layer 3 network devices, MDM solutions, Enterprise Antivirus solutions, SNMP versions 1, 2, & 3, and 802.1x
Configure and design networks capable of network traffic replication to NAC, IDS/IPS systems using port mirroring (Cisco SPAN), VLANs, ACLs, and network taps
Create and maintain deadlines for a successful NAC implementation while integrating with many enterprise level network components
Build SQL Databases, and created SQL queries, and LDAP queries to integrate with CounterACT.
Build Domain Controllers, SQL servers, NPS servers, DNS Servers, DHCP servers, and File Servers.
Design and implement automated access control-based policies on trusted VS non trusted devices, compliance level, and endpoint device type using dynamic access lists, VLAN changes, and virtual firewall
Design Guest Networks to automate user registration with captive portal/http hijacks
Facilitate knowledge transfers to potential customers, and influenced CounterAct implementation expansions
Provide real-time reports which included device inventories and compliance status
Work with Project Managers, Security Engineers, Network Engineers, Systems Administrators, and Compliance team to implement the CounterAct NAC appliance to enterprise environments with over 100,000 endpoints to ensure network compliance