Senior Network Fortinet Engineer

Position Overview:

We are actively seeking a Senior Network Fortinet Engineer to join our IT infrastructure team for our financial services organization. This position is responsible for the architecture, implementation, and management of advanced Fortinet-based network security solutions across enterprise environments.

The ideal candidate brings deep hands-on experience with FortiGate firewalls, FortiManager, FortiAnalyzer, Switches, SD-WAN, and related technologies, and is comfortable working in a fast-paced, large-scale, multi-tenant or multi-site environment.

Key Responsibilities:

• Design, deploy, and manage Fortinet solutions (FortiGate, FortiManager, FortiAnalyzer, FortiWeb, FortiAuthenticator) across enterprise and hybrid on-prem / datacenter environments.
• Act as a subject matter expert (SME) for Fortinet infrastructure, firewall policy design, VPN configuration (IPSec/SSL), and UTM services.
• Build and maintain resilient and scalable network security architectures supporting multi-site and nationwide connectivity (including SD-WAN).
• Perform advanced network and firewall troubleshooting, analyzing traffic flows, logs, and potential threats.
• Collaborate with cross-functional teams' infrastructure, security, support, and application teams to align Fortinet capabilities with business needs.
• Conduct risk assessments, and security audits, and enforce best practices for network segmentation and perimeter defense.
• Support incident response and root cause analysis for network-related security events.
• Document network and firewall topologies, rulesets, standard operating procedures, and runbooks.
• Mentor junior engineers and contribute to internal knowledge sharing and skills development.

Qualifications:

Required:

• 7+ years of experience as a network engineer with at least 3 years of Fortinet-specific engineering experience.
• Expertise in Fortinet product suite (FortiGate, FortiManager, FortiAnalyzer).
• Fortinet NSE 4 Certification (NSE 5-7 preferred).
• In-depth knowledge of routing, switching, TCP/IP, VPN, OSPF / BGP technologies, and network security protocols.
• Experience supporting enterprise or multi-site network infrastructures (remote users, datacenters, branch offices).
• Strong understanding of firewall policy design, NAT, high availability (HA) configurations, and logging/reporting.
• Ability to work independently with minimal supervision.

Preferred:

• NSE 6 or NSE 7 certification or in progress.
• Strong understanding of SD-WAN.
• Background in security operations, penetration testing, or regulatory compliance (HIPAA, PCI-DSS, NIST, etc.)
• Experience with scripting/automation (e.g., Python, Ansible) is a plus.
• Fortinet zero touch deployment

Travel Requirement:

• Up to 10% domestic travel for data center visits or branch deployments

#INDTarget