Forescout Engineer

Parra Consulting Group, Inc. is seeking highly skilled Forescout Engineer to design, deploy, and maintain Forescout solutions to enhance network security and device visibility. The ideal candidate will have expertise in Forescout CounterACT and related technologies, with a focus on securing endpoints, managing network access, and ensuring compliance across IT and OT environments. The Forescout Engineer will support a customer in Tampa, Florida

This successful candidate will be responsible for the following:
Forescout Implementation and Administration:
• Design, deploy, and configure Forescout CounterACT to enable continuous monitoring and device visibility.
• Integrate Forescout with third-party tools and technologies (e.g., SIEMs, firewalls, NAC systems).
• Create and optimize policies for device discovery, classification, compliance, and enforcement.

Network Security and Device Visibility:
• Perform continuous monitoring of devices across the IT and OT environments to identify security risks.
• Implement and maintain automated network access control (NAC) policies.
• Analyze endpoint behavior to detect vulnerabilities, compliance issues, or potential threats

Troubleshooting and Optimization:
• Diagnose and resolve issues related to Forescout deployments, configurations, or integrations.
• Conduct system health checks, performance tuning, and upgrades to ensure optimal functionality.
• Optimize Forescout policies and workflows to improve efficiency and security outcomes.

Client and Team Collaboration:
• Collaborate with cross-functional teams to integrate Forescout solutions into broader security architectures.
• Provide recommendations and best practices for network security and device management.
• Train and support end-users and IT teams on Forescout usage and operations.

Client Support and Training:
• Provide expert advice on best practices for Splunk implementation and optimization.
• Conduct training sessions and workshops for end-users and administrators.
• Troubleshoot and resolve Splunk-related issues promptly.

Technical Skills:
• Strong expertise in Forescout CounterACT design, configuration, and administration.
• Knowledge of network protocols, architecture, and devices (e.g., routers, switches, firewalls).
• Experience with endpoint security and compliance management.
• Familiarity with scripting languages such as Python, Bash, or PowerShell.
• Hands-on experience with integration using REST APIs and third-party tools like SIEMs or firewalls.
Soft Skills:
• Strong analytical and problem-solving abilities.
• Excellent communication and documentation skills.
• Ability to work independently or as part of a team in a fast-paced environment.

Qualifications Required:
• Active TS Security Clearance
• Bachelor’s Degree
• Familiarity with other security tools like Splunk, CrowdStrike, or Palo Alto Networks.
• Strong expertise in Forescout CounterACT design, configuration, and administration.
• 3+ years of experience in network security or Forescout administration.
• Hands-on experience with large-scale network and endpoint monitoring.
• Forescout Certified Administrator (FSCA) or Forescout Certified Advanced Administrator (FSAA) (preferred).
• Additional certifications in network security (e.g., CISSP, CCNA, CCNP) are a plus.

Preferred Qualifications:
• Experience with Splunk apps such as Enterprise Security (ES), IT Service Intelligence (ITSI), or Splunk Phantom.
• Experience with cloud environments (AWS, Azure, or GCP).
• Familiarity with DevOps or CI/CD tools like Jenkins, Kubernetes, or Terraform.