LRS Consulting Services is seeking a Zero Trust Network Operations Engineer to support day-to-day operation, monitoring, and lifecycle management of enterprise network security infrastructure within a global environment. This is a hands-on operational role supporting 1,000+ sites and 100,000+ users across datacenters, manufacturing plants, sales offices, and customer contact centers. The engineer will work closely with global IT operations teams, security partners, and managed service providers to ensure secure, stable, and compliant network services.

The technology environment includes Cisco, Fortinet, Zscaler, Silver Peak SD-WAN, Akamai Guardicore, Tufin, Forescout NAC, Microsoft Azure, Google GCP, and related security platforms.

Responsibilities:

Operational Support and Maintenance

• Operate and support enterprise Zero Trust platforms, primarily Forescout NAC and Infoblox DDI.
• Perform daily monitoring, health checks, and troubleshooting of network access control services, DNS, and DHCP.
• Manage network access exceptions, MAC address repository (MAR) whitelisting, and device compliance checks for corporate and BYOD/Guest networks.

Data Analytics and Asset Management

• Leverage data analytics skills to analyze, correlate, and reconcile asset data across Forescout, Infoblox, Axonius, and ServiceNow CMDB.
• Assist in identifying, classifying, and managing the lifecycle of unmanaged, IoT, and OT devices across the global network.

Incident and Problem Management

• Respond to network access control incidents, including 802.1X/RADIUS authentication failures and Guest Captive Portal issues.
• Collaborate with the Network TOC, Service Desk, and field IT teams during security events or network service degradations.

Change and Configuration Management

• Implement approved access control rules, semi-trust policies, and network segmentation changes (VLAN assignments/ACLs) in production environments.
• Execute DNS/DHCP configuration changes and IPAM updates following formal change management processes.

Automation and Continuous Improvement

• Identify opportunities to automate repetitive operational tasks (e.g., utilizing PowerApps/Power Automate to streamline MAC address approvals).
• Assist with operational runbooks, standard operating procedures, and knowledge documentation for L1/L2 support teams.

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Data Analytics, or a related discipline.
• Hands-on operational experience supporting enterprise network security, network access control, or DDI environments.
• Working knowledge of network authentication protocols (802.1X, RADIUS, MAB) and core networking concepts (TCP/IP, VLANs, routing/switching).
• Experience troubleshooting DNS, DHCP, and IP address management (IPAM) issues.
• Experience working within ITIL-based operational processes (incident, change, problem).
• Third party candidates will NOT be considered
• Candidates must have permanent authorization to work in the US. 

Preferred Qualifications

• Direct experience operating Forescout, Infoblox, or Axonius platforms.
• Experience with ServiceNow CMDB and building automated workflows (e.g., PowerApps).
• Exposure to Zero Trust Network Architecture and IoT/OT device classification from an operational perspective.
• Basic scripting or automation experience (Python preferred).
• Security or networking certifications such as Forescout FSCA/FSCP, CCNA, or Security+.

The base range for this contract position is $45 - $60 per hour. Our pay ranges are determined by role, level, and location. The range displayed on each job posting reflects the minimum and maximum target for new hires of this position across all US locations. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training.

LRS is an equal opportunity employer. Applicants for employment will receive consideration without unlawful discrimination based on race, color, religion, creed, national origin, sex, age, disability, marital status, gender identity, domestic partner status, sexual orientation, genetic information, citizenship, status or protected veteran status.

In some cases, LRS Consulting uses generative artificial intelligence ("AI") in support of our hiring processes. LRS takes steps to ensure the use of AI does not result in discrimination based on protected class(es). AI may be used in the hiring process solely in support of the assessment of candidate qualifications. All decisions in the hiring process are made by LRS employees. If AI will be used in the hiring process for the position for which you are applying, you will be notified and will have the opportunity to opt out. Please contact AI.Questions@lrs.com with any questions.