We are seeking an experienced Forescout NAC L2 Engineer to manage, monitor, troubleshoot, and support our Network Access Control (NAC) infrastructure within an enterprise environment. This role involves the daily administration of the Forescout platform, ensuring endpoint visibility and compliance, configuring policies, resolving incidents, and collaborating with network and security teams.

Key Responsibilities

- Provide L2 operational and technical support for the Forescout NAC infrastructure.
- Administer and monitor the Forescout platform, including appliances, modules, policies, and endpoint visibility.
- Configure and manage NAC policies for wired, wireless, and remote endpoints.
- Troubleshoot endpoint authentication, classification, authorization, and network access issues.
- Manage endpoint profiling, classification, compliance checks, and remediation policies.
- Integrate with switches, wireless controllers, firewalls, DHCP, Active Directory/LDAP, RADIUS/TACACS+, and other network/security infrastructure.
- Troubleshoot 802.1X, MAC Authentication Bypass (MAB), VLAN assignment, and network access-related issues.
- Monitor NAC alerts, incidents, and endpoint activity, taking appropriate corrective actions.
- Implement policy changes, tune rules, update configurations, and perform troubleshooting based on business requirements.
- Analyze logs and troubleshoot connectivity and NAC-related incidents.
- Coordinate with Network, Security, Service Desk, and OEM/vendor teams for complex issues.
- Participate in change implementation, testing, and post-change validation.
- Maintain technical documentation, SOPs, configuration records, and troubleshooting guides.
- Support security and compliance requirements related to endpoint access control.




- Participate in incident, problem, and change management processes.
- Provide support during planned maintenance activities and critical incidents.

Required Technical Skills
- Strong hands-on experience with Forescout NAC.
- Solid understanding of Network Access Control concepts and endpoint profiling.
- Hands-on experience with Forescout policy configuration and troubleshooting.
- Strong knowledge of 802.1X and MAB authentication.
- Valuable understanding of VLANs, DHCP, DNS, TCP/IP, switching, and routing fundamentals.
- Experience working with Cisco switches and enterprise network environments.
- Knowledge of RADIUS, TACACS+, Active Directory/LDAP, and authentication mechanisms.
- Experience troubleshooting wired and wireless endpoint connectivity.
- Knowledge of network security concepts and endpoint compliance.
- Good understanding of network protocols and packet-flow troubleshooting.

Good to Have
- Forescout certification or relevant NAC certification.
- Experience with Cisco ISE or other NAC solutions.
- Knowledge of Palo Alto, Fortinet, Check Point, or other enterprise firewalls.
- Experience with SIEM/security monitoring tools.
- Knowledge of endpoint security and vulnerability management solutions.
- Experience working in large enterprise or data-center environments.

Candidate Profile
- Strong troubleshooting and analytical skills.
- Good understanding of enterprise networking and security.
- Ability to independently handle L2 incidents and troubleshoot complex NAC issues.
- Effective communication and stakeholder-management skills.
- Comfortable working in a 24x7 support environment, including shifts and on-call support as required.
- Ability to coordinate effectively with internal teams, clients, and technology vendors.

📌 Forescout NACEngineer (Maharashtra)
🏢 Cephas Consultancy Services Private
📍 Maharashtra