Endace Platform Engineer

4w1 month ago

ENS Solutions

Washington, US · Full-time · $130,000 – $160,000

About this role

We are seeking a seasoned Endace Implementation & Sustainment Engineer to architect, deploy, integrate, and operate Endace packet capture and network recording platforms across a large, distributed enterprise. The ideal candidate has deep expertise in network forensics, packet analytics, and telemetry architecture, combined with hands-on familiarity supporting Zero Trust visibility strategies.

This role owns the end-to-end lifecycle for Endace systems—design, installation, configuration, maintenance, and optimization—while integrating the platform with SIEM/SOAR, detection engineering, and analytics tooling. You will lead the deployment and configuration of Endace appliances for enterprise-scale packet capture.

You will partner with network engineering, cloud teams, and security operations to ensure full-spectrum telemetry coverage. Building high-availability Endace clusters across data centers and cloud-connected environments is key. Additionally, you will deliver training to operational teams on Endace platform usage and best practices.

This role supports Zero Trust Architecture and continuous verification workflows, aligning Endace visibility with identity-aware segmentation and policy enforcement. You will develop traffic baselines and build dashboards and investigation workflows for SOC, threat hunters, and IR teams. It offers the opportunity to shape telemetry architecture for mission-critical systems in a high-security environment.

Requirements

5+ years of experience in cybersecurity engineering, network security, or SOC tooling.
Strong understanding of packet analysis, network forensics, deep packet inspection, and PCAP workflows.
Proficiency in Linux administration and scripting (Python, Bash, PowerShell).
Experience supporting regulated or high-security environments (DoD, IC, FedRAMP, PCI, HIPAA).
Demonstrated experience integrating Endace with SIEMs, SOAR tools, and investigation platforms.
Solid understanding of core network protocols (TCP/IP, TLS, DNS, HTTP/S, NetFlow/IPFIX, etc.).
Active TS/SCI clearance; willingness to take a polygraph exam.
DoD 8570.01-M IAT Level II Certification and ability to obtain CSSP-IS certification within 30 days.

Responsibilities

Architect, deploy, integrate, and operate Endace packet capture platforms across a large distributed enterprise.
Lead the design, deployment, and configuration of Endace appliances for enterprise-scale packet capture.
Build high-availability, scalable, and resilient Endace clusters across data centers and cloud-connected environments.
Integrate Endace with analytics ecosystems including SIEM, SOAR, NDR, EDR, and threat intelligence platforms.
Troubleshoot packet loss, timing drift, flow indexing issues, and performance bottlenecks.
Manage PCAP retention strategies, indexing policies, and storage allocation across distributed deployments.
Develop traffic baselines, segmentation decisions, and enforcement models using Endace data.
Automate deployment, configuration, and sustainment workflows using Ansible, Terraform, or scripting.