Job DescriptionJob Description We are seeking a seasoned Endace Implementation & Sustainment Engineer to architect, deploy, integrate, and operate Endace packet capture, monitoring, and network recording platforms across a large, distributed enterprise. The ideal candidate has deep experience in network forensics, packet analytics, and telemetry architecture, combined with hands-on familiarity supporting Zero Trust visibility and segmentation strategies. This role owns the end-to-end lifecycle for Endace systems-including design, installation, configuration, maintenance, and long-term optimization-while integrating the platform with SIEM/SOAR, detection engineering, analytics tooling, and broader Zero Trust security controls. Responsibilities include leading the design, deployment, and configuration of Endace appliances for enterprise-scale packet capture. Developing packet capture strategies aligned to network architecture, mission requirements, and Zero Trust visibility controls. Building high-availability, scalable, and resilient Endace clusters across data centers and cloud-connected environments. Integrating Endace with analytics ecosystems (SIEM, SOAR, NDR, EDR, threat intel, investigation platforms). Maintaining and tuning Endace hardware and software for optimal performance, including upgrades, patching, sensor tuning, and storage lifecycle. Troubleshooting packet loss, timing drift, flow indexing issues, clock synchronization, and performance bottlenecks. Monitoring device health, capacity, and telemetry fidelity to ensure consistent, forensically-sound data capture. Managing PCAP retention strategies, indexing policies, and storage allocation across distributed deployments. Aligning Endace visibility architecture with Zero Trust telemetry requirements and continuous verification workflows; Ensuring packet capture and telemetry support identity-aware network segmentation and policy enforcement. Supporting development of traffic baselines, segmentation decisions, and enforcement models using Endace data. Automating deployment, configuration, and sustainment workflows using Ansible, Terraform, or scripting. Building dashboards, runbooks, playbooks, and investigation workflows for SOC, threat hunters, and IR teams. Partnering with network engineering, cloud teams, and security operations to ensure full-spectrum telemetry coverage. Deliverin training and guidance to operational teams on Endace platform usage and best practices. Requirements 5+ years of experience in cybersecurity engineering, network security, or SOC tooling. Strong understanding of packet analysis, network forensics, deep packet inspection, and PCAP workflows. Proficiency in Linux administration and scripting (Python, Bash, PowerShell). Experience supporting regulated or high-security environments (DoD, IC, FedRAMP, PCI, HIPAA). Familiarity with Zero Trust Architecture, segmentation principles, and identity-centric policy models. Demonstrated experience integrating Endace with SIEMs, SOAR tools, and investigation platforms. Solid understanding of core network protocols (TCP/IP, TLS, DNS, HTTP/S, NetFlow/IPFIX, etc.) Active TS/SCI clearance; willingness to take a polygraph exam Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ year of experience supporting IT projects and activities. Years of experience may be accepted in lieu of degree. DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CHFI, CFR, Cloud+, or CND certification within 30 days of start date Additional Qualifications: Proven hands-on experience deploying, configuring, and managing Endace DAG/EndaceProbe solutions in production. Familiarity with complementary network tools (Zeek, Suricata, Arkime, NDR platforms). Experience with cloud networking and packet capture strategies in AWS, Azure, or GCP. Certifications such as CISSP, GCIA, GNFA, GCIH, or vendor-specific credentials. Strong analytical and problem-solving ability. Excellent communication and documentation skills. Able to collaborate with cross-functional technical and non-technical stakeholders. Comfortable leading architecture conversations and driving platform strategy. Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance
04/26/2026
Full time
Job DescriptionJob Description We are seeking a seasoned Endace Implementation & Sustainment Engineer to architect, deploy, integrate, and operate Endace packet capture, monitoring, and network recording platforms across a large, distributed enterprise. The ideal candidate has deep experience in network forensics, packet analytics, and telemetry architecture, combined with hands-on familiarity supporting Zero Trust visibility and segmentation strategies. This role owns the end-to-end lifecycle for Endace systems-including design, installation, configuration, maintenance, and long-term optimization-while integrating the platform with SIEM/SOAR, detection engineering, analytics tooling, and broader Zero Trust security controls. Responsibilities include leading the design, deployment, and configuration of Endace appliances for enterprise-scale packet capture. Developing packet capture strategies aligned to network architecture, mission requirements, and Zero Trust visibility controls. Building high-availability, scalable, and resilient Endace clusters across data centers and cloud-connected environments. Integrating Endace with analytics ecosystems (SIEM, SOAR, NDR, EDR, threat intel, investigation platforms). Maintaining and tuning Endace hardware and software for optimal performance, including upgrades, patching, sensor tuning, and storage lifecycle. Troubleshooting packet loss, timing drift, flow indexing issues, clock synchronization, and performance bottlenecks. Monitoring device health, capacity, and telemetry fidelity to ensure consistent, forensically-sound data capture. Managing PCAP retention strategies, indexing policies, and storage allocation across distributed deployments. Aligning Endace visibility architecture with Zero Trust telemetry requirements and continuous verification workflows; Ensuring packet capture and telemetry support identity-aware network segmentation and policy enforcement. Supporting development of traffic baselines, segmentation decisions, and enforcement models using Endace data. Automating deployment, configuration, and sustainment workflows using Ansible, Terraform, or scripting. Building dashboards, runbooks, playbooks, and investigation workflows for SOC, threat hunters, and IR teams. Partnering with network engineering, cloud teams, and security operations to ensure full-spectrum telemetry coverage. Deliverin training and guidance to operational teams on Endace platform usage and best practices. Requirements 5+ years of experience in cybersecurity engineering, network security, or SOC tooling. Strong understanding of packet analysis, network forensics, deep packet inspection, and PCAP workflows. Proficiency in Linux administration and scripting (Python, Bash, PowerShell). Experience supporting regulated or high-security environments (DoD, IC, FedRAMP, PCI, HIPAA). Familiarity with Zero Trust Architecture, segmentation principles, and identity-centric policy models. Demonstrated experience integrating Endace with SIEMs, SOAR tools, and investigation platforms. Solid understanding of core network protocols (TCP/IP, TLS, DNS, HTTP/S, NetFlow/IPFIX, etc.) Active TS/SCI clearance; willingness to take a polygraph exam Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ year of experience supporting IT projects and activities. Years of experience may be accepted in lieu of degree. DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CHFI, CFR, Cloud+, or CND certification within 30 days of start date Additional Qualifications: Proven hands-on experience deploying, configuring, and managing Endace DAG/EndaceProbe solutions in production. Familiarity with complementary network tools (Zeek, Suricata, Arkime, NDR platforms). Experience with cloud networking and packet capture strategies in AWS, Azure, or GCP. Certifications such as CISSP, GCIA, GNFA, GCIH, or vendor-specific credentials. Strong analytical and problem-solving ability. Excellent communication and documentation skills. Able to collaborate with cross-functional technical and non-technical stakeholders. Comfortable leading architecture conversations and driving platform strategy. Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance
Job DescriptionJob Description We are seeking a seasoned Endace Implementation & Sustainment Engineer to architect, deploy, integrate, and operate Endace packet capture, monitoring, and network recording platforms across a large, distributed enterprise. The ideal candidate has deep experience in network forensics, packet analytics, and telemetry architecture, combined with hands-on familiarity supporting Zero Trust visibility and segmentation strategies. This role owns the end-to-end lifecycle for Endace systems-including design, installation, configuration, maintenance, and long-term optimization-while integrating the platform with SIEM/SOAR, detection engineering, analytics tooling, and broader Zero Trust security controls. Responsibilities include leading the design, deployment, and configuration of Endace appliances for enterprise-scale packet capture. Developing packet capture strategies aligned to network architecture, mission requirements, and Zero Trust visibility controls. Building high-availability, scalable, and resilient Endace clusters across data centers and cloud-connected environments. Integrating Endace with analytics ecosystems (SIEM, SOAR, NDR, EDR, threat intel, investigation platforms). Maintaining and tuning Endace hardware and software for optimal performance, including upgrades, patching, sensor tuning, and storage lifecycle. Troubleshooting packet loss, timing drift, flow indexing issues, clock synchronization, and performance bottlenecks. Monitoring device health, capacity, and telemetry fidelity to ensure consistent, forensically-sound data capture. Managing PCAP retention strategies, indexing policies, and storage allocation across distributed deployments. Aligning Endace visibility architecture with Zero Trust telemetry requirements and continuous verification workflows; Ensuring packet capture and telemetry support identity-aware network segmentation and policy enforcement. Supporting development of traffic baselines, segmentation decisions, and enforcement models using Endace data. Automating deployment, configuration, and sustainment workflows using Ansible, Terraform, or scripting. Building dashboards, runbooks, playbooks, and investigation workflows for SOC, threat hunters, and IR teams. Partnering with network engineering, cloud teams, and security operations to ensure full-spectrum telemetry coverage. Deliverin training and guidance to operational teams on Endace platform usage and best practices. Requirements 5+ years of experience in cybersecurity engineering, network security, or SOC tooling. Strong understanding of packet analysis, network forensics, deep packet inspection, and PCAP workflows. Proficiency in Linux administration and scripting (Python, Bash, PowerShell). Experience supporting regulated or high-security environments (DoD, IC, FedRAMP, PCI, HIPAA). Familiarity with Zero Trust Architecture, segmentation principles, and identity-centric policy models. Demonstrated experience integrating Endace with SIEMs, SOAR tools, and investigation platforms. Solid understanding of core network protocols (TCP/IP, TLS, DNS, HTTP/S, NetFlow/IPFIX, etc.) Active TS/SCI clearance; willingness to take a polygraph exam Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ year of experience supporting IT projects and activities. Years of experience may be accepted in lieu of degree. DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CHFI, CFR, Cloud+, or CND certification within 30 days of start date Additional Qualifications: Proven hands-on experience deploying, configuring, and managing Endace DAG/EndaceProbe solutions in production. Familiarity with complementary network tools (Zeek, Suricata, Arkime, NDR platforms). Experience with cloud networking and packet capture strategies in AWS, Azure, or GCP. Certifications such as CISSP, GCIA, GNFA, GCIH, or vendor-specific credentials. Strong analytical and problem-solving ability. Excellent communication and documentation skills. Able to collaborate with cross-functional technical and non-technical stakeholders. Comfortable leading architecture conversations and driving platform strategy. Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance
04/26/2026
Full time
Job DescriptionJob Description We are seeking a seasoned Endace Implementation & Sustainment Engineer to architect, deploy, integrate, and operate Endace packet capture, monitoring, and network recording platforms across a large, distributed enterprise. The ideal candidate has deep experience in network forensics, packet analytics, and telemetry architecture, combined with hands-on familiarity supporting Zero Trust visibility and segmentation strategies. This role owns the end-to-end lifecycle for Endace systems-including design, installation, configuration, maintenance, and long-term optimization-while integrating the platform with SIEM/SOAR, detection engineering, analytics tooling, and broader Zero Trust security controls. Responsibilities include leading the design, deployment, and configuration of Endace appliances for enterprise-scale packet capture. Developing packet capture strategies aligned to network architecture, mission requirements, and Zero Trust visibility controls. Building high-availability, scalable, and resilient Endace clusters across data centers and cloud-connected environments. Integrating Endace with analytics ecosystems (SIEM, SOAR, NDR, EDR, threat intel, investigation platforms). Maintaining and tuning Endace hardware and software for optimal performance, including upgrades, patching, sensor tuning, and storage lifecycle. Troubleshooting packet loss, timing drift, flow indexing issues, clock synchronization, and performance bottlenecks. Monitoring device health, capacity, and telemetry fidelity to ensure consistent, forensically-sound data capture. Managing PCAP retention strategies, indexing policies, and storage allocation across distributed deployments. Aligning Endace visibility architecture with Zero Trust telemetry requirements and continuous verification workflows; Ensuring packet capture and telemetry support identity-aware network segmentation and policy enforcement. Supporting development of traffic baselines, segmentation decisions, and enforcement models using Endace data. Automating deployment, configuration, and sustainment workflows using Ansible, Terraform, or scripting. Building dashboards, runbooks, playbooks, and investigation workflows for SOC, threat hunters, and IR teams. Partnering with network engineering, cloud teams, and security operations to ensure full-spectrum telemetry coverage. Deliverin training and guidance to operational teams on Endace platform usage and best practices. Requirements 5+ years of experience in cybersecurity engineering, network security, or SOC tooling. Strong understanding of packet analysis, network forensics, deep packet inspection, and PCAP workflows. Proficiency in Linux administration and scripting (Python, Bash, PowerShell). Experience supporting regulated or high-security environments (DoD, IC, FedRAMP, PCI, HIPAA). Familiarity with Zero Trust Architecture, segmentation principles, and identity-centric policy models. Demonstrated experience integrating Endace with SIEMs, SOAR tools, and investigation platforms. Solid understanding of core network protocols (TCP/IP, TLS, DNS, HTTP/S, NetFlow/IPFIX, etc.) Active TS/SCI clearance; willingness to take a polygraph exam Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ year of experience supporting IT projects and activities. Years of experience may be accepted in lieu of degree. DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CHFI, CFR, Cloud+, or CND certification within 30 days of start date Additional Qualifications: Proven hands-on experience deploying, configuring, and managing Endace DAG/EndaceProbe solutions in production. Familiarity with complementary network tools (Zeek, Suricata, Arkime, NDR platforms). Experience with cloud networking and packet capture strategies in AWS, Azure, or GCP. Certifications such as CISSP, GCIA, GNFA, GCIH, or vendor-specific credentials. Strong analytical and problem-solving ability. Excellent communication and documentation skills. Able to collaborate with cross-functional technical and non-technical stakeholders. Comfortable leading architecture conversations and driving platform strategy. Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance
Job DescriptionJob Description Knowledge Managers design, manage, and maintain knowledge management (KM) systems that improve information sharing, collaboration, and secure access to organizational data. This role is ideal for an organized professional who enhances knowledge transfer and supports informed decision-making across the enterprise. Key Responsibilities KM Systems Administration Develop and maintain KM systems (e.g. SharePoint, databases, libraries, internal sites). Manage the KM environment to improve information flow and usability. Ensure all records in compliance with all regulations. Training & User Support Train users, including IC partners, and create user guides. Serve as the primary point of contact for KM tool support and best practices. Policy & Repository Management Maintain repositories for instructions, Internal Process Documents (IPDs), and policy memos to ensure accuracy, consistency and accessibility. Knowledge Transfer & Collaboration Strengthen the KM environment to support collaboration and information sharing. Lead efforts to document and retain critical organizational knowledge. Data Integrity & Security Ensure records are accurate, accessible, and secure. Success Factors Organized and detail-oriented Collaborative and supportive Technically proficient and innovative Strong focus on security and compliance Requirements Bachelor's degree in a related field 3+ years managing SharePoint or KM platforms Experience in records management or KM processes Strong communication and training skills Active TS/SCI : willingness to obtain a CI Poly Preferred Experience with DoD, IC, or federal agencies Familiarity with IC information-sharing policies and security requirements SharePoint super user experience Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance
04/26/2026
Full time
Job DescriptionJob Description Knowledge Managers design, manage, and maintain knowledge management (KM) systems that improve information sharing, collaboration, and secure access to organizational data. This role is ideal for an organized professional who enhances knowledge transfer and supports informed decision-making across the enterprise. Key Responsibilities KM Systems Administration Develop and maintain KM systems (e.g. SharePoint, databases, libraries, internal sites). Manage the KM environment to improve information flow and usability. Ensure all records in compliance with all regulations. Training & User Support Train users, including IC partners, and create user guides. Serve as the primary point of contact for KM tool support and best practices. Policy & Repository Management Maintain repositories for instructions, Internal Process Documents (IPDs), and policy memos to ensure accuracy, consistency and accessibility. Knowledge Transfer & Collaboration Strengthen the KM environment to support collaboration and information sharing. Lead efforts to document and retain critical organizational knowledge. Data Integrity & Security Ensure records are accurate, accessible, and secure. Success Factors Organized and detail-oriented Collaborative and supportive Technically proficient and innovative Strong focus on security and compliance Requirements Bachelor's degree in a related field 3+ years managing SharePoint or KM platforms Experience in records management or KM processes Strong communication and training skills Active TS/SCI : willingness to obtain a CI Poly Preferred Experience with DoD, IC, or federal agencies Familiarity with IC information-sharing policies and security requirements SharePoint super user experience Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance
Job DescriptionJob Description We are seeking a seasoned Endace Implementation & Sustainment Engineer to architect, deploy, integrate, and operate Endace packet capture, monitoring, and network recording platforms across a large, distributed enterprise. The ideal candidate has deep experience in network forensics, packet analytics, and telemetry architecture, combined with hands-on familiarity supporting Zero Trust visibility and segmentation strategies. This role owns the end-to-end lifecycle for Endace systems-including design, installation, configuration, maintenance, and long-term optimization-while integrating the platform with SIEM/SOAR, detection engineering, analytics tooling, and broader Zero Trust security controls. Responsibilities include leading the design, deployment, and configuration of Endace appliances for enterprise-scale packet capture. Developing packet capture strategies aligned to network architecture, mission requirements, and Zero Trust visibility controls. Building high-availability, scalable, and resilient Endace clusters across data centers and cloud-connected environments. Integrating Endace with analytics ecosystems (SIEM, SOAR, NDR, EDR, threat intel, investigation platforms). Maintaining and tuning Endace hardware and software for optimal performance, including upgrades, patching, sensor tuning, and storage lifecycle. Troubleshooting packet loss, timing drift, flow indexing issues, clock synchronization, and performance bottlenecks. Monitoring device health, capacity, and telemetry fidelity to ensure consistent, forensically-sound data capture. Managing PCAP retention strategies, indexing policies, and storage allocation across distributed deployments. Aligning Endace visibility architecture with Zero Trust telemetry requirements and continuous verification workflows; Ensuring packet capture and telemetry support identity-aware network segmentation and policy enforcement. Supporting development of traffic baselines, segmentation decisions, and enforcement models using Endace data. Automating deployment, configuration, and sustainment workflows using Ansible, Terraform, or scripting. Building dashboards, runbooks, playbooks, and investigation workflows for SOC, threat hunters, and IR teams. Partnering with network engineering, cloud teams, and security operations to ensure full-spectrum telemetry coverage. Deliverin training and guidance to operational teams on Endace platform usage and best practices. Requirements 5+ years of experience in cybersecurity engineering, network security, or SOC tooling. Strong understanding of packet analysis, network forensics, deep packet inspection, and PCAP workflows. Proficiency in Linux administration and scripting (Python, Bash, PowerShell). Experience supporting regulated or high-security environments (DoD, IC, FedRAMP, PCI, HIPAA). Familiarity with Zero Trust Architecture, segmentation principles, and identity-centric policy models. Demonstrated experience integrating Endace with SIEMs, SOAR tools, and investigation platforms. Solid understanding of core network protocols (TCP/IP, TLS, DNS, HTTP/S, NetFlow/IPFIX, etc.) Active TS/SCI clearance; willingness to take a polygraph exam Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ year of experience supporting IT projects and activities. Years of experience may be accepted in lieu of degree. DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CHFI, CFR, Cloud+, or CND certification within 30 days of start date Additional Qualifications: Proven hands-on experience deploying, configuring, and managing Endace DAG/EndaceProbe solutions in production. Familiarity with complementary network tools (Zeek, Suricata, Arkime, NDR platforms). Experience with cloud networking and packet capture strategies in AWS, Azure, or GCP. Certifications such as CISSP, GCIA, GNFA, GCIH, or vendor-specific credentials. Strong analytical and problem-solving ability. Excellent communication and documentation skills. Able to collaborate with cross-functional technical and non-technical stakeholders. Comfortable leading architecture conversations and driving platform strategy. Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance
04/24/2026
Full time
Job DescriptionJob Description We are seeking a seasoned Endace Implementation & Sustainment Engineer to architect, deploy, integrate, and operate Endace packet capture, monitoring, and network recording platforms across a large, distributed enterprise. The ideal candidate has deep experience in network forensics, packet analytics, and telemetry architecture, combined with hands-on familiarity supporting Zero Trust visibility and segmentation strategies. This role owns the end-to-end lifecycle for Endace systems-including design, installation, configuration, maintenance, and long-term optimization-while integrating the platform with SIEM/SOAR, detection engineering, analytics tooling, and broader Zero Trust security controls. Responsibilities include leading the design, deployment, and configuration of Endace appliances for enterprise-scale packet capture. Developing packet capture strategies aligned to network architecture, mission requirements, and Zero Trust visibility controls. Building high-availability, scalable, and resilient Endace clusters across data centers and cloud-connected environments. Integrating Endace with analytics ecosystems (SIEM, SOAR, NDR, EDR, threat intel, investigation platforms). Maintaining and tuning Endace hardware and software for optimal performance, including upgrades, patching, sensor tuning, and storage lifecycle. Troubleshooting packet loss, timing drift, flow indexing issues, clock synchronization, and performance bottlenecks. Monitoring device health, capacity, and telemetry fidelity to ensure consistent, forensically-sound data capture. Managing PCAP retention strategies, indexing policies, and storage allocation across distributed deployments. Aligning Endace visibility architecture with Zero Trust telemetry requirements and continuous verification workflows; Ensuring packet capture and telemetry support identity-aware network segmentation and policy enforcement. Supporting development of traffic baselines, segmentation decisions, and enforcement models using Endace data. Automating deployment, configuration, and sustainment workflows using Ansible, Terraform, or scripting. Building dashboards, runbooks, playbooks, and investigation workflows for SOC, threat hunters, and IR teams. Partnering with network engineering, cloud teams, and security operations to ensure full-spectrum telemetry coverage. Deliverin training and guidance to operational teams on Endace platform usage and best practices. Requirements 5+ years of experience in cybersecurity engineering, network security, or SOC tooling. Strong understanding of packet analysis, network forensics, deep packet inspection, and PCAP workflows. Proficiency in Linux administration and scripting (Python, Bash, PowerShell). Experience supporting regulated or high-security environments (DoD, IC, FedRAMP, PCI, HIPAA). Familiarity with Zero Trust Architecture, segmentation principles, and identity-centric policy models. Demonstrated experience integrating Endace with SIEMs, SOAR tools, and investigation platforms. Solid understanding of core network protocols (TCP/IP, TLS, DNS, HTTP/S, NetFlow/IPFIX, etc.) Active TS/SCI clearance; willingness to take a polygraph exam Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ year of experience supporting IT projects and activities. Years of experience may be accepted in lieu of degree. DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CHFI, CFR, Cloud+, or CND certification within 30 days of start date Additional Qualifications: Proven hands-on experience deploying, configuring, and managing Endace DAG/EndaceProbe solutions in production. Familiarity with complementary network tools (Zeek, Suricata, Arkime, NDR platforms). Experience with cloud networking and packet capture strategies in AWS, Azure, or GCP. Certifications such as CISSP, GCIA, GNFA, GCIH, or vendor-specific credentials. Strong analytical and problem-solving ability. Excellent communication and documentation skills. Able to collaborate with cross-functional technical and non-technical stakeholders. Comfortable leading architecture conversations and driving platform strategy. Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance