Network Administrator

Role : Network Administrator

Required Technical Skill Set : Forescout Administration

Experience : 5 to 8 years

Location : Kolkata, Kochi, Bangalore or Hyderabad.

Must Have:-

1. L2/L3 Experience with complex, larger scale network endpoint secure connectivity and access control that spans both wired and wireless access control through Forescout.
2. Experience with 802.1X/NAC, DHCP, HTTPS, TCP, Netscout, Radius, etc. and access control policy development and management and device remediation
3. Experience with IOT and BYOD device access policy controls
4. Very good communication skill.

5.Flexible in 24*7 client support

Good-to-Have:-

1. Additional certification in any network technology (CCNA, CCNP)
2. Experience in automation, AI/ML technologies

Responsibility of / Expectations from the Role :-

1. Designing, configuring, and troubleshooting CounterAct.

Switch Plug-in Optimization (wired):-

• Align endpoint, L2, L3 association with same CounterACT appliance and Configure Connectivity Group
• Re-valuate and re-configure polling Intervals for L2 and L3 switches and routers after configuring connectivity groups.
• Validate and fix L2(MAC)/L3(ARP) Polling to ensure L3 devices are polled for ARP table, L2 devices only for MAC tables.

Wireless Plug-in Configuration:-

• Add any Wireless Controllers to the plugin
• Align Wireless controllers with CounterACT appliance for polling.

2.Classification Policy:-

Classification Sub-Rules creation and clean up based upon:-

• Device type (Vendor, Model, OS etc.)
• NIC
• MAC
• Authentication (MAB, dot1X etc.)

Operation Technology (OT/iOT):-

• NAT
• Windows
• Mobile Devices
• Macintosh
• Printers
• VOIP
• Headset (HaloLens, Meta Quest etc.)
• Camera
• Network Devices
• Linux/Unix/AIX
• Unclassified

3.Clarification Policy creation:-

• OT/iOT Clarification Policy
• Unclassified Clarification Policy
• Validate comments in sub-rules
• Remove initial implementation troubleshooting sub-rules (Port 22 open, netbios/DNS name, etc.)
• Review and restructure Network Device Clarification Policy

Control Policy Optimization:-

• Create catch all buckets/sub-rules in each control policy.
• Review and modify Exemption sub-rules in control policies.
• Add secondary blocking action of Virtual Firewall, i.e., via Channels ingesting Network Tap traffic.
• Review and re-configure recheck setting of control policy sub-rules based on Classification, Clarification and Discovery policy optimizations.

4.Operating System Changes: Policy to detect if a device changes OS fingerprint from one OS to another such as Windows to non-windows.

• Windows Version Changed on a managed device.

5.VPN Plug-in Configuration: Configure VPN plugin to help identify and validate devices connecting via VPN.