Zero Trust Network Security Engineer

LRS Consulting Services is seeking a Zero Trust Network Operations Engineer to support day-to-day operation monitoring and lifecycle management of enterprise network security infrastructure within a global environment. This is a hands-on operational role supporting 1000 sites and 100000 users across datacenters manufacturing plants sales offices and customer contact centers. The engineer will work closely with global IT operations teams security partners and managed service providers to ensure secure stable and compliant network services.

The technology environment includes Cisco Fortinet Zscaler Silver Peak SD-WAN Akamai Guardicore Tufin Forescout NAC Microsoft Azure Google GCP and related security platforms.

Responsibilities:

Operational Support and Maintenance

• Operate and support enterprise Zero Trust platforms primarily Forescout NAC and Infoblox DDI.
• Perform daily monitoring health checks and troubleshooting of network access control services DNS and DHCP.
• Manage network access exceptions MAC address repository (MAR) whitelisting and device compliance checks for corporate and BYOD/Guest networks.

Data Analytics and Asset Management

• Leverage data analytics skills to analyze correlate and reconcile asset data across Forescout Infoblox Axonius and ServiceNow CMDB.
• Assist in identifying classifying and managing the lifecycle of unmanaged IoT and OT devices across the global network.

Incident and Problem Management

• Respond to network access control incidents including 802.1X/RADIUS authentication failures and Guest Captive Portal issues.
• Collaborate with the Network TOC Service Desk and field IT teams during security events or network service degradations.

Change and Configuration Management

• Implement approved access control rules semi-trust policies and network segmentation changes (VLAN assignments/ACLs) in production environments.
• Execute DNS/DHCP configuration changes and IPAM updates following formal change management processes.

Automation and Continuous Improvement

• Identify opportunities to automate repetitive operational tasks (e.g. utilizing PowerApps/Power Automate to streamline MAC address approvals).
• Assist with operational runbooks standard operating procedures and knowledge documentation for L1/L2 support teams.

• Bachelors degree in Computer Science Information Systems Data Analytics or a related discipline.
• Hands-on operational experience supporting enterprise network security network access control or DDI environments.
• Working knowledge of network authentication protocols (802.1X RADIUS MAB) and core networking concepts (TCP/IP VLANs routing/switching).
• Experience troubleshooting DNS DHCP and IP address management (IPAM) issues.
• Experience working within ITIL-based operational processes (incident change problem).
• Third party candidates will NOT be considered
• Candidates must have permanent authorization to work in the US.

• Direct experience operating Forescout Infoblox or Axonius platforms.
• Experience with ServiceNow CMDB and building automated workflows (e.g. PowerApps).
• Exposure to Zero Trust Network Architecture and IoT/OT device classification from an operational perspective.
• Basic scripting or automation experience (Python preferred).
• Security or networking certifications such as Forescout FSCA/FSCP CCNA or Security.

The base range for this contract position is $45 - $60 per hour. Our pay ranges are determined by role level and location. The range displayed on each job posting reflects the minimum and maximum target for new hires of this position across all US locations. Within the range individual pay is determined by work location and additional factors including job-related skills experience and relevant education or training.

LRS is an equal opportunity employer. Applicants for employment will receive consideration without unlawful discrimination based on race color religion creed national origin sex age disability marital status gender identity domestic partner status sexual orientation genetic information citizenship status or protected veteran status.

In some cases LRS Consulting uses generative artificial intelligence (AI) in support of our hiring processes. LRS takes steps to ensure the use of AI does not result in discrimination based on protected class(es). AI may be used in the hiring process solely in support of the assessment of candidate qualifications. All decisions in the hiring process are made by LRS employees. If AI will be used in the hiring process for the position for which you are applying you will be notified and will have the opportunity to opt out. Please contact with any questions.