Position Summary: Cypher Analytics is seeking a Network Engineer with extensive hands-on experience administering Forescout and supporting enterprise network infrastructure. The Network Engineer will design, implement, document, and optimize secure, resilient network access control (NAC) solutions supporting mission-critical Navy workloads.
This position serves as a technical resource for complex troubleshooting across network devices and endpoints, develops hardened installation and configuration procedures aligned with Navy standards, and provides Tier 4 operational support. The Network Engineer collaborates with engineers, solution owners, and government stakeholders to identify and implement access control strategies that meet mission, security, and operational requirements
Minimum Requirements: - Security Clearance: Active Secret Security Clearance is required
- Education: High school diploma or GED.
- Experience: Minimum 8 years of professional experience in network engineering and security, including enterprise NAC deployments.
- Cybersecurity Workforce Qualification: Requires both an IA Certification (e.g., Security+ CE, or higher) ** an Operating Environment (OE) Certification (Relevant Network/Forescout Cert, e.g., CCNA, CCNP, CCIE etc.) for CSWF compliance.
- Forescout Administration: Hands-on experience deploying or maintaining Forescout CounterACT appliances in medium-to-large enterprise environments, including practical experience developing Forescout policies.
- Security Integration & Automation: Experience with security orchestration and automation and integrating Forescout with IT security and management systems.
- Technical Documentation & Communication: Strong written and verbal communication skills, including the ability to produce clear technical documentation and communicate effectively with technical teams and government stakeholders.
- Work Environment: Ability to work on-site at NIWC Pacific Old Town Campus in San Diego, CA, and collaborate with government stakeholders. Remote candidates are not currently being considered.
- Travel Availability: Ability to travel OCONUS, typically for one to three weeks per trip, up to approximately three times per year. Travel is generally planned at least three months in advance.
Desired Qualifications: - Advanced knowledge developing Forescout policy.
- Advanced knowledge of EAP-TLS, 802.1x, MAB, and RADIUS.
- Direct experience executing DoD Comply to Connect (C2C) programs and leading pilot to production rollouts.
- Knowledge of DoD information security policies, STIGs, standards, procedures, directives, frameworks, and risk management processes for enterprise systems
- Deep familiarity with Forescout modules (CounterACT/eyeSight, eyeControl, Policy Manager, SecureConnector/agent), and API integrations
- NAC (Network Access Control) experience across multiple vendors (Cisco ISE and SDA), including comparative policy design
- Experience with wireless NAC (Network Access Control) and wireless controllers
- Experience with HBSS/ESS, MDE/XDR (e.g., Trellix, CrowdStrike, Microsoft Defender), MCC/Intune
- Experience architecting and designing IP networks
- Familiarity with RMF and ATO processes
- Exposure to Zero Trust principles (identity centric access, micro segmentation, least privilege) and NIST SP 800 53/800 207 alignment
- Relevant certifications: ForeScout Certified Administrator (FSCA) or ForeScout Certified Engineer (FSCE) Certification , Security+ (DoD 8570/8140), CASP+, CISSP, CCNP Enterprise/Security, Aruba/Juniper certifications
- Experience in OT/IoT device discovery and segmentation
- Scripting for automation (Python/PowerShell), and experience with REST/webhooks to orchestrate policy actions
- Strong communication skills
Cypher Analytics offers to eligible employees: - 100% Employee Covered Medical, Dental, LTD, and Life Insurance
- 401K Match of up to 4%
- Employee Stock Ownership Program
- Potential for merit-based end of year bonus
- Training and Team building events
- Excellent Team Atmosphere
- $3,000.00 Annual Tuition Reimbursement
