Network Security Engineer (forescout NAC)

Hi Folks,

I am Karuna from Neo Prism we are hiring for Network Security Engineer role @ Pune Location

Job Title: Network Security Engineer (Forescout NAC)

Location: Pune

Contract to Hire

Job Overview:

Academic Qualification : BE, B Tech from reputed university or equivalent

Skillset

• 5+ years of experience in IT Service management, (Incident Management, Vendor Management, Problem management, Change management)
• Minimum CCNA Certified ideally CCNP certified or trained.
• FSCP certified/accredited at a minimum (ForeScout Certified Courses)
• Hands on with configuring and deploying policy enforcement using ForeScout NAC.
• In-depth knowledge of network security, threat detection, risk mitigation and in particular Network Access Control.
• Strong understanding of ITIL practices.
• Hands on with managing/troubleshooting Cisco and other OEMs Network elements.
• Should have hand on experience on ForeScout (Enterprise manager & appliances), Broadcom Spectrum (monitoring tool)
• Should have knowledge of all or some of the below tools to perform day to day job
• (Splunk, Essas, Cisco ISE, Cisco Prime NEs (Router, Switches, Wireless controller, Firewalls, ACI Fabrics etc), Netrequest, Cyberark, Dx Netops, Ansible, SPDW, MS Office, Service Now, Jira).

Core Activities:

• Advanced troubleshooting, remediate and go deep in diagnosing NAC issues and provide RCAs which includes server issues and NAC enforcements issues as well.
• Support with new configuration deployments, policy enforcements, upgrades and migrations
• NAC Performance monitoring, manage NAC system health, account compliances, proactive alarms management, alarm or event management, switch error management, problem task management, managing all requests through JIRA, create documentation for all activities.
• Manage Forescout policy engine – compliance, device roles, segmentation
• Configure switch/WLC/VM integration for automated control (SNMP, SSH, API)
• Troubleshoot and analyse posture failures using logs and reports
• Manage Certificate/802.1X integrations and guest access portal
• Add/remove/troubleshoot network elements to NAC ecosystem
• NAC policy audits, activation, remediation (requires SME)
• Perform NAC Maintenance activities
• Support the Customer teams doing automation for various NAC activities/monitoring.
• Support to development activities such as enforcement, validation, testing, reports & data extraction.
• After any development/automation signed off by Customer’s L3 N/w or Engg. the deployment & maintenance will be owned by L1/L2.
• Perform enhancements/improvements to existing reporting, incident management process based on feedback from Customer operations/Engg.
• Design and optimize classification rules, plugins, and remediation workflows
• High-severity incident management and escalation oversight
• Technical design reviews, policy governance, and advisory role
• Business alignment and global stakeholder coordination
• Collaborate with cross-functional teams, including network engineers, security analysts, and system administrators, to address complex NAC-related issues and projects.
• Create technical documentation, as-built network diagrams, inventory control documentation, and security documentation.
• Update knowledge base in ITSM (IT Service Management) tools and create SOPs (Standard Operating Procedures)/Runbooks.

Behavioral:

• Good Communication skills are must.
• A good team player, Customer friendly
• Willing to work for extended hours in case of critical event

karunasree@neoprisminc.com