Description
Role Overview:
Worldwide but working UK hours/Start ASAP/12months + possible extension
We are seeking an experienced and highly skilled Forescout NAC Consultant to join our network security team. You will be responsible for the design, deployment, integration, configuration, and optimization of the Forescout Platform to enhance our organization's visibility, compliance, and access control capabilities across the network. This role requires a deep understanding of NAC solutions, network infrastructure, endpoint compliance, and cybersecurity best practices.
Key Responsibilities:
-
Assess current network security posture and recommend NAC strategies leveraging Forescout CounterACT.
-
Lead the deployment, configuration, and customization of Forescout NAC solutions across various network environments (wired, wireless, VPN).
-
Design and implement dynamic policy enforcement, including endpoint profiling, posture assessment, and automated remediation.
-
Integrate Forescout with other security tools (eg, SIEM, CMDB, AD, SCCM, antivirus, Firewalls).
-
Monitor and tune Forescout policies to ensure optimal performance, accuracy, and minimal disruption to business operations.
-
Create and maintain technical documentation, including architecture diagrams, runbooks, and operational procedures.
-
Provide technical support and troubleshooting for NAC-related issues, escalating to vendor support as needed.
-
Collaborate with network, infrastructure, and security teams to align NAC implementation with overall cybersecurity strategy.
-
Train internal teams on Forescout operations, policy creation, and best practices.
Requirements: Essential Skills & Experience:
-
Proven experience designing and implementing Forescout CounterACT solutions in medium to large enterprise environments.
-
Strong knowledge of network protocols (TCP/IP, DHCP, DNS, VLANs, 802.1X, SNMP).
-
Experience with endpoint profiling, policy configuration, device classification, and remediation workflows.
-
Familiarity with integrations into third-party systems: Active Directory, MDM, patch management tools, Firewalls, and SIEM.
-
Experience working with security compliance frameworks (eg, ISO 27001, NIST, PCI DSS).
-
Strong troubleshooting and analytical skills.