Apply on Employer Site

ENS Solutions, LLC · 3 weeks ago

Endace Platform Engineer - Active TS/SCI with CI Poly

College Park, MD

Full-time

Onsite

Senior Level

5+ years exp

ENS Solutions, LLC is a service-disabled veteran owned IT consulting and management firm specializing in innovative solutions for the Department of Defense and Intelligence Community. They are seeking a seasoned Endace Implementation & Sustainment Engineer to architect, deploy, integrate, and operate Endace packet capture and monitoring platforms, ensuring optimal performance and security across a distributed enterprise.

Information Technology & Services

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Lead the design, deployment, and configuration of Endace appliances for enterprise-scale packet capture

Develop packet capture strategies aligned to network architecture, mission requirements, and Zero Trust visibility controls

Build high-availability, scalable, and resilient Endace clusters across data centers and cloud-connected environments

Integrate Endace with analytics ecosystems (SIEM, SOAR, NDR, EDR, threat intel, investigation platforms)

Maintain and tune Endace hardware and software for optimal performance, including upgrades, patching, sensor tuning, and storage lifecycle

Troubleshoot packet loss, timing drift, flow indexing issues, clock synchronization, and performance bottlenecks

Monitor device health, capacity, and telemetry fidelity to ensure consistent, forensically-sound data capture

Manage PCAP retention strategies, indexing policies, and storage allocation across distributed deployments

Align Endace visibility architecture with Zero Trust telemetry requirements and continuous verification workflows; Ensure packet capture and telemetry support identity-aware network segmentation and policy enforcement

Support development of traffic baselines, segmentation decisions, and enforcement models using Endace data

Automate deployment, configuration, and sustainment workflows using Ansible, Terraform, or scripting

Build dashboards, runbooks, playbooks, and investigation workflows for SOC, threat hunters, and IR teams

Partner with network engineering, cloud teams, and security operations to ensure full-spectrum telemetry coverage

Deliver training and guidance to operational teams on Endace platform usage and best practices

Qualification

Network forensicsPacket analyticsEndace integrationLinux administrationZero Trust ArchitecturePCAP workflowsCybersecurity engineeringDoD 8570.01-M CertificationCloud networkingAnalytical skillsCommunication skillsProblem-solving skillsCollaboration skills

Required

5+ years of experience in cybersecurity engineering, network security, or SOC tooling

Strong understanding of packet analysis, network forensics, deep packet inspection, and PCAP workflows

Proficiency in Linux administration and scripting (Python, Bash, PowerShell)

Experience supporting regulated or high-security environments (DoD, IC, FedRAMP, PCI, HIPAA)

Familiarity with Zero Trust Architecture, segmentation principles, and identity-centric policy models

Demonstrated experience integrating Endace with SIEMs, SOAR tools, and investigation platforms

Solid understanding of core network protocols (TCP/IP, TLS, DNS, HTTP/S, NetFlow/IPFIX, etc.)

Active TS/SCI clearance; willingness to take a polygraph exam

Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ year of experience supporting IT projects and activities. Years of experience may be accepted in lieu of degree

DoD 8570.01-M Information Assurance Technician (IAT) Level II Certification, including Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND Certification

Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CHFI, CFR, Cloud+, or CND certification within 30 days of start date