ForeScout SME

Clearance Level
Cyber Security
Durham, North Carolina

REQ#: RQ104918

Travel Required: None
Requisition Type: Pipeline

GDIT is supporting EPA's Office of Environmental Information under the Infrastructure Support and Applications Hosting task order. The purpose of this contract is to develop and operate EPA's infrastructure and application platforms to be reliable, secure, and technologically advanced. The services obtained under this contract support the entirety of EPA at all geographic locations and numerous research facilities across the United States. The services consist of data center management, application hosting, application deployment/maintenance, geospatial service support, network security, cyber security, cloud computing, COOP support, and Enterprise Identity and Access Management (EIAM) and Active Directory (AD). The primary work location is in Research Triangle Park, NC.

We are currently seeking an Information Assurance/Security Specialist (Senior) with a focus area of ForeScout Counteract, Network routing and switching to join our team supporting the Environmental Protection Agency’s (EPA) Networks and Security Operations Division. The role will involve support of the agencies ForeScout CounterAct implementation as part of the DHS Continuous Diagnostics and Mitigation (CDM) program. The team member in this position should also have a strong understanding of networking (switch and Router) operations (mostly Cisco) in a data center environment. Normal tasks will include (but not limited to): maintaining and upgrading the ForeScout implementation, troubleshooting ForeScout discovery issues and outages; expanding the ForeScout implementation to provide NAC services; and interface with the firewall, network and NOC teams to resolve end to end issues.  

The candidate for this position will perform the following duties and tasks:

  • Update the ForeScout platforms with new subnets for discovery
  • Update diagrams for network architecture using Microsoft Visio
  • Troubleshoot various types of issues with the ForeScout platforms (discovery, network reachability, SNMP access to network devices, interfacing with various network devices to collect ARP and MAC information)
  • Review Cisco router and switch configuration using CLI commands to identify why ForeScout is not properly communicating
  • Submit and respond to tickets using a central ticketing system such as Remedy
  • Provide reports as needed using the Microsoft Office Suite
  • Submit and perform changes in the agency system
  • Provide outage notifications and update outage reports
  • Review IP addresses using the agency IPAM system to identify networks that need to be monitored by ForeScout
  • Perform network traces to analyze traffic issues
  • Provides specific, detailed information for hardware and software selection, implementation techniques, and tools for the most efficient solution to meet business needs, including present and future capacity requirements.
  • May propose solutions to management to ensure all communications requirements based on future needs and current usage, configuring such solutions to optimize cost savings.
  • Prepares or ensures that appropriate network documentation exists, including operational instructions.
  • Provides regular monitoring and network analysis regarding short- and long-range planning for in-house systems.
  • May coordinate third-party maintenance for ForeScout equipment.
  • Other duties may include, packet capture and analysis, change management, and support of inventory management processes.
  • Contributes to completion of specific programs and projects.
  • Has frequent inter-organizational and outside customer contacts.

The Candidate must have the following qualifications and abilities:


  • Complete understanding and wide application of technical principles, theories and concepts in LAN and WAN (MPLS) implementation.
  • Must have understanding of DHCP and DNS interaction with servers and client systems.
  • Experience with Cisco router and switch configuration and CLI commands (IOS & Nexus)
  • Experience using a central ticketing system such as Remedy
  • Experience using the Microsoft Office Suite
  • Experience using Microsoft Visio for drawings
  • Experience following a change management system to submit and perform changes
  • Experience supporting and configuring ForeScout CounterAct platforms (SME Level)
  • Experience as a technical team lead to mentor others with lower level skills


BS or equivalent + 5 yrs related experience, or MS + 3 yrs experience


Cisco CCNA (desired)

ForeScout FSCA or FSAA or FSCE (strongly desired)

About Our Work

We are GDIT. The people supporting some of the most complex government, defense, and intelligence projects across the country. We deliver. Bringing the expertise needed to understand and advance critical missions. We transform. Shifting the ways clients invest in, integrate, and innovate technology solutions. We ensure today is safe and tomorrow is smarter. We are there. On the ground, beside our clients, in the lab, and everywhere in between. Offering the technology transformations, strategy, and mission services needed to get the job done.

COVID-19 Vaccination

GDIT does not have a vaccination mandate applicable to all employees. To protect the health and safety of its employees and to comply with customer requirements, however, GDIT may require employees in certain positions to be fully vaccinated against COVID-19. Vaccination requirements will depend on the status of the federal contractor mandate and customer site requirements.

GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.