About this role
Key Responsibilities
- Design, deploy, and manage FortiGate next-generation firewalls (NGFW) across data center, campus, cloud, and branch environments
- Configure and maintain FortiManager and FortiAnalyzer for centralized policy management, logging, and reporting
- Architect and support SD-WAN deployments using FortiGate SD-WAN capabilities, including performance-based routing and application steering
- Implement and manage site-to-site and remote-access VPNs (IPsec, SSL-VPN)
- Configure and troubleshoot routing protocols (BGP, OSPF) in conjunction with FortiGate deployments
- Manage the broader Fortinet Security Fabric: FortiSwitch, FortiAP, FortiClient EMS, FortiAuthenticator, FortiSandbox, FortiWeb, FortiADC
- Develop and enforce firewall policies, NAT rules, security profiles (IPS, AV, web filtering, application control)
- Lead network segmentation initiatives, including Zero Trust Network Access (ZTNA) implementation
- Perform firmware upgrades, patching, and lifecycle management across the Fortinet estate
- Conduct root-cause analysis for complex network/security incidents; provide Tier 3/4 escalation support
- Support compliance and audit requirements (PCI-DSS, HIPAA, SOC 2, NIST) as they relate to firewall/network configuration
- Create and maintain network diagrams, configuration standards, and runbooks
- Collaborate with security operations (SOC) teams on threat detection, incident response, and log analysis
- Mentor junior engineers and contribute to change management/CAB processes
- Participate in on-call rotation for infrastructure support
Required Qualifications
- 7–10+ years of network engineering experience, with 5+ years focused specifically on Fortinet products
- 2+ years in a client-facing management or account management capacity.
- NSE 4 certification required; NSE 5–7 (or higher) strongly preferred
- Expert-level knowledge of FortiOS configuration (CLI and GUI)
- Strong understanding of TCP/IP, routing/switching, VLANs, VPNs, and network security fundamentals
- Hands-on experience with FortiManager, FortiAnalyzer, and FortiGate HA clustering
- Experience with SD-WAN design and implementation
- Familiarity with cloud-based FortiGate deployments (AWS, Azure, or GCP)
- Scripting/automation experience (Python, Ansible, or REST API) for Fortinet device management is a plus
- Strong documentation and communication skills
- Bachelor's degree in a related field or equivalent professional experience
- Proven ability to manage multiple client accounts simultaneously with competing priorities.
- Strong understanding of ITIL framework and IT service management principles.
- Experience with PSA tools (e.g., ConnectWise Manage) for ticket queues.
- Exceptional communication skills — written and verbal — with the ability to translate technical information for non-technical audiences.
- Demonstrated ability to work across teams in a fast-paced environment.
- Strong analytical skills with experience interpreting service metrics and driving data-informed decisions.
Preferred Qualifications
- NSE 7 (Enterprise Firewall) or NSE 8
- CCNP or CCIE (Cisco) as complementary networking credentials
- CISSP or similar security certification
- ITIL v4 Foundation certification or higher.
- Prior experience working within an MSP or technology services organization.