We are seeking a seasoned Endace Implementation & Sustainment Engineer to architect, deploy, integrate, and operate Endace packet capture, monitoring, and network recording platforms across a large, distributed enterprise. The ideal candidate has deep experience in network forensics, packet analytics, and telemetry architecture, combined with hands-on familiarity supporting Zero Trust visibility and segmentation strategies.

This role owns the end-to-end lifecycle for Endace systems—including design, installation, configuration, maintenance, and long-term optimization—while integrating the platform with SIEM/SOAR, detection engineering, analytics tooling, and broader Zero Trust security controls.

Responsibilities include leading the design, deployment, and configuration of Endace appliances for enterprise-scale packet capture. Developing packet capture strategies aligned to network architecture, mission requirements, and Zero Trust visibility controls. Building high-availability, scalable, and resilient Endace clusters across data centers and cloud-connected environments. Integrating Endace with analytics ecosystems (SIEM, SOAR, NDR, EDR, threat intel, investigation platforms). Maintaining and tuning Endace hardware and software for optimal performance, including upgrades, patching, sensor tuning, and storage lifecycle. Troubleshooting packet loss, timing drift, flow indexing issues, clock synchronization, and performance bottlenecks. Monitoring device health, capacity, and telemetry fidelity to ensure consistent, forensically-sound data capture. Managing PCAP retention strategies, indexing policies, and storage allocation across distributed deployments. Aligning Endace visibility architecture with Zero Trust telemetry requirements and continuous verification workflows; Ensuring packet capture and telemetry support identity-aware network segmentation and policy enforcement. Supporting development of traffic baselines, segmentation decisions, and enforcement models using Endace data. Automating deployment, configuration, and sustainment workflows using Ansible, Terraform, or scripting. Building dashboards, runbooks, playbooks, and investigation workflows for SOC, threat hunters, and IR teams. Partnering with network engineering, cloud teams, and security operations to ensure full-spectrum telemetry coverage. Deliverin training and guidance to operational teams on Endace platform usage and best practices.