Forescout

Role & responsibilities

We are seeking a highly technical Senior Network Security Infrastructure Engineer to lead the
engineering architectural optimization and lifecycle management of our enterprise network visibility and
behavioral detection platforms This position is dedicated to maintaining full ownership of our Network Access
Control Forescout eyeSighteyeControl and Network Detection and Response Vectra AI platforms
anchored on a robust enterprisewide Cisco switching and wireless infrastructure
A core objective for this role involves driving automated ecosystem orchestrations using Forescout
eyeExtend Connect to bridge onpremises visibility with clouddelivered Zero Trust models specifically
handling specialized integrations with Zscaler Private Access ZPA
KEY RESPONSIBILITIES
Forescout Platform Lifecycle Engineering Oversee the health capacity planning and deployment
topology of enterprise physical appliances specifically maintaining Forescout 6140 and 6160 hardware
SFP transceiver optimizations and baseline operating system upgrades
Vectra AI Platform Operations Migrations Lead architectural hardware migrations and platform
scaling from legacy architectures x29v2 and x47 models over to modern highperformance Vectra B127
Brain and Sensor infrastructure
Automated Ecosystem Integration Build and maintain custom APIdriven workflows Python
integrations and custom web service orchestrations utilizing the Forescout eyeExtend Connect
framework
Advanced Zscaler ZPA Architecture Support Architect and continuously optimize the integration
between Forescout and Zscaler Private Access ZPA Resolve visibility and posture evaluation

challenges induced by ZPA App Connector NAT mechanics by transitioning policies from standard IP
based matching to MACaddresscentric tracking via SecureConnector

Cisco Traffic Engineering Mirroring Design implement and troubleshoot highvolume data feeds to
supply flawless network telemetry to Vectra sensors and Forescout appliances using Ciscospecific traffic
capture mechanisms including SPAN RSPAN and ERSPAN across complex Layer 3 boundaries
Enterprise Access Enforcement Define deploy and troubleshoot complex Cisco Layer 2 and Layer 3
channel configurations dynamic 8021X authentication policies MAC Authentication Bypass MAB and
automated RADIUSChangeofAuthorization CoA profiles on Cisco Catalyst platforms and Wireless LAN
Controllers WLC

TECHNICAL REQUIREMENTS QUALIFICATIONS
Forescout Stack 4 years of handson experience handling physical 61406160 appliances
custom policy generation clustering failover rules and advanced eyeExtend
deployment environments

Vectra AI Platform Proven background scaling or migrating physical Brain and Sensor models
across x29v2 x47 and newer B127 platform architectures Deep
understanding of MITRE ATTCK mapping

Cisco Networking Expertise in Cisco Catalyst switching infrastructure enterprise Cisco WLC
environments 8021X supplicant configurations dACL injection and traffic
mirroring SPANRSPANERSPAN

Zscaler Architecture Firm engineering grasp of Zscaler Private Access ZPA App Connector
traffic pathways Server Groups Application Segments and handling local
endpoint tracking constraints
PREFERRED EDUCATION CERTIFICATIONS
Forescout Certified Administrator FSCA or Forescout Certified Engineer FSCE
Vectra Certified Professional or Architect validation
Cisco Certified Network Professional CCNP Security CCNP Enterprise or equivalent industry
certification
Demonstrated script proficiency Python REST APIs JSON payloads to manage automated webhooks
and integrations

Preferred candidate profile