We are seeking an experienced Forescout NAC L2 Engineer to manage, monitor, troubleshoot, and support our Network Access Control infrastructure in an enterprise environment. This role involves daily administration of the Forescout platform, ensuring endpoint visibility and compliance, configuring policies, resolving incidents, and collaborating with network and security teams.

As a Forescout NAC L2 Engineer, your primary responsibilities will include:

Key Responsibilities

- Provide L2 operational and technical support for the Forescout NAC infrastructure.
- Administer and monitor the Forescout platform, including appliances, modules, policies, and endpoint visibility.
- Configure and manage NAC policies for wired, wireless, and remote endpoints.
- Troubleshoot endpoint authentication, classification, authorization, and network access issues.
- Manage endpoint profiling, classification, compliance checks, and remediation policies.
- Integrate with switches, wireless controllers, firewalls, DHCP, Active Directory/LDAP, RADIUS/TACACS+, and other network and security infrastructure.
- Troubleshoot 802.1X, MAC Authentication Bypass (MAB), VLAN assignment, and network access issues.
- Monitor NAC alerts, incidents, and endpoint activity, taking appropriate corrective action.
- Implement policy changes, tune rules, update configurations, and troubleshoot based on business requirements.
- Analyze logs and troubleshoot connectivity and NAC-related incidents.
- Coordinate with Network, Security, Service Desk, and OEM/vendor teams to resolve complex issues.
- Participate in change implementation, testing, and post-change validation.
- Maintain technical documentation, SOPs, configuration records, and troubleshooting guides.
- Support security and compliance requirements related to endpoint access control.
- Participate in incident, problem, and change management processes.




- Provide support during planned maintenance activities and critical incidents.

To excel in this position, candidates should possess the following technical skills:

Required Technical Skills

- Strong hands-on experience with Forescout NAC.
- Solid understanding of Network Access Control concepts and endpoint profiling.
- Hands-on experience configuring and troubleshooting Forescout policies.
- Strong knowledge of 802.1X and MAB authentication.
- Good understanding of VLANs, DHCP, DNS, TCP/IP, switching, and routing fundamentals.
- Experience working with Cisco switches and enterprise network environments.
- Knowledge of RADIUS, TACACS+, Active Directory/LDAP, and authentication mechanisms.
- Experience troubleshooting wired and wireless endpoint connectivity.
- Knowledge of network security concepts and endpoint compliance.
- Good understanding of network protocols and packet-flow troubleshooting.

Additionally, the following qualifications and experience are considered a plus:

Good to Have

- Forescout certification or a relevant NAC certification.
- Experience with Cisco ISE or other NAC solutions.
- Knowledge of Palo Alto, Fortinet, Check Point, or other enterprise firewalls.
- Experience with SIEM or security monitoring tools.
- Knowledge of endpoint security and vulnerability management solutions.
- Experience working in large enterprise or data center environments.

We are looking for a candidate who demonstrates the following qualified attributes:

Candidate Profile

- Strong troubleshooting and analytical skills.
- Good understanding of enterprise networking and security.
- Ability to independently handle L2 incidents and troubleshoot complex NAC issues.
- Effective communication and stakeholder management skills.
- Comfort working in a 24x7 support environment, including shifts and on-call support as required.
- Ability to coordinate effectively with internal teams, clients, and technology vendors.

📌 Forescout NACEngineer (Maharashtra)
🏢 Cephas Consultancy Services Private
📍 Maharashtra