Senior Forescout Engineer (OCONUS - Germany)
serviss · Wiesbaden, Germany
No German requiredPosted yesterday
Apply directly with the employer or job board. Applications are never handled here.
Job Description: Senior Forescout Engineer (OCONUS - Germany)
Location: Wiesbaden, Germany
Employment Type: Full-Time
About SERVISS
At SERVISS, we deliver cutting-edge cybersecurity and IT solutions to government and commercial clients, with a mission to secure systems, data, and critical infrastructure through innovation and expertise. We don’t just deploy tools; we engineer mission platforms that become foundational systems of record for cyber operations, compliance automation, and national cyber readiness. From DHS CISA to DoW mission enclaves, our work shapes how government sees, governs, and defends its digital terrain.
This is an opportunity to play a critical role in strengthening the cybersecurity posture of Army networks through the deployment, integration, optimization, and sustainment of Forescout-based Network Access Control (NAC) and Comply-to-Connect (C2C) capabilities.
Position Summary
SERVISS is seeking a highly skilled, hands-on Senior Forescout Engineer to support U.S. Army cybersecurity operations in Wiesbaden, Germany.
The successful candidate will serve as a technical subject matter expert responsible for engineering, deploying, maintaining, and optimizing Forescout solutions across complex Department of Defense (DoD) enterprise environments.
Working alongside Army technical teams, defenders, and incident responders, you will help deliver and sustain enterprise C2C capabilities that improve asset visibility, enforce network access policies, and strengthen cybersecurity compliance across multiple networks and security domains.
This position is primarily on-site with some remote flexibility. Occasional travel may be required to support C2C deployments at Army installations within the continental United States (CONUS) and outside the continental United States (OCONUS).
The Work
This is a hands-on senior engineering role. The selected candidate will:
- Engineer, deploy, configure, integrate, and sustain Forescout NAC and C2C solutions across U.S. Army enterprise networks.
- Provide advanced technical support for C2C implementations across multiple DoD networks and classification domains.
- Design and optimize network access control policies, endpoint discovery, device classification, and compliance enforcement.
- Integrate Forescout capabilities with enterprise networking, cybersecurity, and endpoint management technologies.
- Monitor platform health, performance, availability, and operational effectiveness, including tuning, alerting, and reporting.
- Troubleshoot complex network connectivity, authentication, policy enforcement, and systems integration issues.
- Identify, assess, and support remediation of findings associated with DISA Security Technical Implementation Guides (STIGs).
- Develop and maintain technical documentation, network architecture diagrams, deployment procedures, and operational processes.
- Recommend architectural and operational improvements that enhance scalability, reliability, security, and performance.
- Collaborate with Army stakeholders, security engineering teams, and other mission partners to resolve technical challenges.
- Prepare technical reports, operational status updates, and briefings for program management, senior leadership, and government stakeholders.
- Support deployment activities at additional Army installations as mission requirements dictate.
Required Qualifications
- Demonstrated hands-on experience engineering, deploying, administering, and troubleshooting Forescout solutions in large enterprise environments.
- Strong understanding of Network Access Control (NAC) architectures, technologies, and security enforcement practices.
- Experience implementing or supporting DoD Comply-to-Connect (C2C) initiatives.
- Advanced understanding of TCP/IP networking, routing, switching, network segmentation, and enterprise network security.
- Experience working with Cisco, Juniper, or Brocade networking technologies.
- Familiarity with Cisco ASA and Palo Alto firewalls.
- Experience diagnosing complex networking and systems integration issues using structured troubleshooting and root-cause analysis.
- Understanding of DoD cybersecurity requirements, DISA STIGs, and enterprise security compliance practices.
- Ability to work independently, prioritize competing technical requirements, and take ownership of complex engineering challenges.
- Strong written and verbal communication skills, including the ability to communicate technical recommendations to engineering teams, program leadership, and government stakeholders.
- Active Secret security clearance.
Preferred Qualifications
- Experience supporting U.S. military cybersecurity programs and operations.
- Advanced experience with Forescout eyeSight, eyeControl, and associated platform components.
- Experience integrating Forescout with enterprise security platforms, endpoint management solutions, and network infrastructure.
- Advanced systems administration experience with Windows, Linux, UNIX, or macOS.
- Familiarity with scripting or programming languages such as Python, PowerShell, Perl, Java, or C.
- Experience supporting geographically distributed, mission-critical DoD environments.
- Relevant Forescout certifications and industry certifications such as Security+, Network+, CCNA, CCNP, or CISSP.
- Experience working in overseas DoD environments, particularly within the U.S. Army Europe and Africa area of responsibility.
What We're Looking For
We are looking for more than a traditional network engineer. We want a Forescout subject matter expert who understands how to translate complex cybersecurity requirements into reliable, operationally effective solutions.
The ideal candidate is technically accomplished, proactive, collaborative, and comfortable working directly with military and civilian stakeholders. You should enjoy solving challenging technical problems, improving existing architectures, and helping mission partners achieve measurable cybersecurity outcomes.
Above all, we value engineers who take ownership, deliver exceptional results, and recognize the importance of the missions they support.
Compensation
SERVISS offers a highly competitive compensation and benefits package designed to attract exceptional engineering talent.
- Base Salary: Starting at $165,000 annually, with higher compensation available based on experience, technical expertise, and qualifications.
- Signing Bonus: Up to $10,000 for qualified candidates.
Final compensation will be determined based on the candidate's experience, qualifications, and the requirements of the position
The Freedom to Thrive.
Why Join SERVISS? Our goal as an employer is simple yet profound: to create an environment where you can be your best self, pursue your passions, and enjoy the freedom to thrive both personally and professionally. Your success is our success, and we're committed to supporting you every step of the way.
- Highly competitive compensation and best-in-class benefits
- 100% of medical, vision, dental, and life insurance premiums paid for by SERVISS
- 401(k) retirement plan with 6% dollar for dollar match
- Be part of an exciting company with ground floor opportunities in the SERVISS STARS long-term incentive equity program
- Opportunities for annual performance bonuses and growth incentives
- Incentive bonuses for earning advanced technology and professional certifications
Additional considerations for HUBZone resident applicants: Preference may be given to applicants residing in a federal HUBZone in support of SERVISS LLC’s HUBZone workforce objectives; all qualified candidates are encouraged to apply.
How to determine HUBZone residency: Candidates can verify HUBZone eligibility by entering their home address into the SBA HUBZone Map at https://maps.certify.sba.gov/hubzone/map*. If your residence falls within a designated HUBZone area on the map, you are considered a HUBZone resident for hiring preference purposes.*
l2VhcZo7B4
Keep looking
2,500+ English-friendly jobs in Germany
Every one checked for language requirements, updated daily.