Cyber Security Engineer - NAC / W2

Client: Federal / DoD
Duration: 4-6 months
Location: Multiple CONUS military bases | 75% travel
Clearance: Active Secret required

Role:
Hands-on Cyber Security Engineer responsible for Comply-to-Connect (C2C) / Network Access Control (NAC) implementation, policy enforcement, device posture, integrations, and enforcement waves across DoD environments.

Technical Stack:

• NAC: Forescout / Cisco ISE
• Network: 802.1X, MAB, RADIUS
• Identity: Active Directory, GPO, PKI/Certificates
• Security: ACAS/Tenable, STIG, SCAP, EDR
• SIEM: Security event/log analysis
• Automation: PowerShell, Python, REST APIs
• Environment: DoD/DISA, NOC, Base Cyber/Comm

Key Requirements:

• 5-8 years Cybersecurity experience with 2+ years production NAC enforcement
• Hands-on administration of Forescout or Cisco ISE at enterprise scale
• Experience with device discovery, classification, posture checks, remediation, and policy enforcement
• Strong understanding of 802.1X/MAB/RADIUS, AD/GPO, and PKI
• DoD environment/change-control experience
• Security+ required; CISSP/CEH/CySA+ preferred
• Active Secret clearance
• Must be willing to travel 75% across CONUS military bases