Lead Network Security Engineer (Forescout)

Raymond James - Saint Petersburg, FL

Full-time - Mid Level

Saint Petersburg, FL

Securities, Commodity Contracts, and Other Financial Investments and Related Activities

About the position

The Lead Forescout Engineer is responsible for managing, designing, and improving the enterprise network with a focus on Forescout NAC Global infrastructure. This role involves leading network engineering implementations, providing technical guidance, and driving infrastructure modernization projects. The engineer will work collaboratively with management and peer engineers to ensure the successful delivery of technology projects and provide Tier 3 technical support.

Responsibilities

• Manage and improve the Forescout infrastructure lifecycle.
• Expand existing Forescout environment and build new functionalities based on business requirements.
• Research and recommend innovative technologies for enterprise infrastructure management.
• Utilize and integrate network components such as Forescout NAC servers, firewalls, switches, and cloud infrastructure elements.
• Identify and implement network improvements for performance and resiliency.
• Provide ad-hoc support for incidents requiring Tier 3 resources.
• Maintain documentation using Microsoft Visio.
• Participate in 24x7 on-call rotation for SME support requirements.
• Maintain service level agreements and project timelines.
• Improve security posture by addressing vulnerabilities and security requirements.

Requirements

• 5 years of experience in network design and implementation of medium-large scale enterprise networks (10,000 users).
• 3-5 years of experience with Forescout technologies.
• Experience deploying and maintaining Forescout NAC appliances in environments with over 10,000 assets.
• Experience with Palo Alto Centrally managed firewall platforms and Panorama policy management.
• Knowledge of IAM best practices and 802.1x deployment in large enterprise environments.

Nice-to-haves

• Experience administering F5 Clusters and Load balancing.
• Familiarity with cloud computing principles and designing secure network solutions for cloud environments.
• Automation/scripting experience (Python, Ansible).
• Experience with Cisco Wireless technologies in a large enterprise environment.

Benefits

• Hybrid-friendly schedule with flexibility and collaboration.
• Opportunity for professional development and training.