Network and Forescout Engineer

Job Description
The Network Engineering and access control will contribute to the overall strategic vision of agency to analyze requirements, design/test solutions and deploy into production. The network engineer will perform duties/tasks specifically related to engineering of Forescout eyeSight/Control, eyeRecover (High Availability – Resiliency), and virtual appliances in an AWS VPC, Wireless LAN (WLAN), and Adaptive Security Appliance (ASA). The candidate will provide policy management and control platform for wired, wireless, and VPN users. Forescout is currently used for 802.1X authentication and Network Access Controls across all mediums utilizing the 802.1X framework/ AnyConnect is currently deployed for VPN access.

• Create policies and profiling network devices that govern what type of access and devices are allowed on our network
• Create roles and personas that govern what user and service accounts may access and what actions a user may perform
• Develop and administer a NAC reporting portal, Role based access control administration
• Design and deploy functional networks (LAN, WLAN, WAN)
• Resolving issues that tiers of support have escalated
• Mentoring team members and addressing user needs
• Excellent problem-solving skills and thorough knowledge of network administration and architecture
• Monitor network performance and integrity
• Work directly with customer and cross functional teams to design, develop and implement a NAC solution for endpoint security
• Author enterprise compliance standards and networking architecture
• Collaborate with Technical SMEs and vendor relations
• Log interpretation for audit, compliance, risk, and security teams
• Playbook development to support at arm’s length Security Intelligence Center monitoring
• Audit artifact collection and representation for security constructs supporting all network device assets and management systems.
• Create and/or maintain standards documentation, design documentation/templates/ topology diagrams and workflow documents.

Required Education, Experience, & Skills

• A minimum of 8 years of professional full-time experience as a Network Engineer with at least 3 years of professional full-time experience with Forescout.
• Demonstrated strong to advanced knowledge of Forescout eyeSight/Control, eyeRecover (High Availability – Resiliency), and virtual appliances in an AWS VPC, Network Access Control (NAC), and strong knowledge of network architecture and protocols
• Possess a strong understanding of multi-tiered application traffic flow, server load balancing, global load balancing, and routing.
• Operational experience with network platform technologies, including hardware refresh, software testing, software upgrades, and complex troubleshooting techniques
• A high level experience with Cisco switches and ACLs
• Experience in leading, troubleshooting, and maintenance efforts for Forescout
• Superior consultative skills both verbal and written, and a team oriented disposition
• Ability to obtain a public trust clearance (US citizenship is a requirement to obtain a public trust).

Preferred Education, Experience, & Skills

• Over 8 years of professional Cisco network engineering and architecture experience
• Forescout certification
• The ability to lead and mentor others

Pay Information
Full-Time Salary Range: $130355 - $221603

Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.

Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20 hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.


About BAE Systems Intelligence & Security
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it’s what we do at BAE Systems. Working here means using your passion and ingenuity where it counts – defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team—making a big impact on a global scale. At BAE Systems, you’ll find a rewarding career that truly makes a difference.

Intelligence & Security (I&S), based in McLean, Virginia, designs and delivers advanced defense, intelligence, and security solutions that support the important missions of our customers. Our pride and dedication shows in everything we do—from intelligence analysis, cyber operations and IT expertise to systems development, systems integration, and operations and maintenance services. Knowing that our work enables the U.S. military and government to recognize, manage and defeat threats inspires us to push ourselves and our technologies to new levels.

Salary : $130,355 - $221,603