Lead Network Security Engineer (Forescout)

Raymond James - Southfield, MI

Full-time - Mid Level

Southfield, MI

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

The Lead Forescout Engineer is responsible for managing, designing, and improving the enterprise network with a focus on Forescout NAC Global infrastructure. This role involves leading network engineering implementations, providing technical guidance, and driving infrastructure modernization projects. The engineer will collaborate with management and peer engineers to deliver technology projects and provide Tier 3 technical support, ensuring the performance and security of the network.

Responsibilities

• Manage and improve the Forescout infrastructure lifecycle.
• Expand existing Forescout environment and build new functionalities based on business requirements.
• Research and recommend innovative technologies for enterprise infrastructure management.
• Utilize and integrate network components such as Forescout NAC servers, firewalls, switches, and cloud infrastructure elements.
• Identify and implement network improvements for performance and resiliency.
• Provide Tier 3 support for incidents requiring engineering resources.
• Maintain documentation using Microsoft Visio and participate in 24x7 on-call rotation.
• Maintain and improve security posture according to regulatory guidelines.
• Collaborate with various business units to implement new technologies.
• Coach peer engineers and perform knowledge transfer activities.

Requirements

• 5 years of experience in network design, implementation, and documentation of medium-large scale enterprise networks.
• 3-5 years of experience with Forescout technologies.
• Experience deploying and maintaining Forescout NAC appliances in environments with over 10,000 assets.
• Experience with routing and switching enterprise technologies (CCNA required, CCNP desirable).
• Experience implementing and maintaining Palo Alto Centrally managed firewall platforms.
• Knowledge of IAM best practices and 802.1x deployment in large enterprise environments.

Nice-to-haves

• Experience administering F5 Clusters and load balancing.
• Familiarity with cloud computing principles and designing secure network solutions for cloud environments.
• Automation/scripting experience (Python, Ansible).
• Experience with monitoring platforms like Microsoft SevOne, SolarWinds, or Splunk.
• Experience with Cisco Wireless technologies in a large enterprise environment.

Benefits

• Hybrid-friendly schedule with flexibility and collaboration.
• Opportunity for professional development and training.