Network Security Engineer (Fortinet)

Network Security Engineer (Fortinet) We're hiring a senior Network Security Engineer to take technical ownership of our enterprise perimeter and connectivity security — designing and governing secure WAN, internet, and remote access architectures while acting as SME for our Fortinet firewall platforms. Key Responsibilities - WAN Security Architecture: Design and govern secure WAN (MPLS, DIA, SD-WAN, cloud, third-party interconnects); define perimeter/edge security standards and reference architectures; lead design reviews; drive Zero Trust adoption - Firewalls: Act as technical owner/SME for enterprise firewall platforms; design and maintain policies; lead migration, modernization, and lifecycle projects; define standards for segmentation, internet edge protection, East-West/North-South traffic control, threat prevention, and secure partner connectivity - Secure Internet Access: SWG, URL filtering, SSL/TLS inspection, malware protection, internet breakout security - Remote Access & VPN: Design and operate IPsec, SSL, and site-to-site VPNs; secure access for employees, contractors, partners, and suppliers - Segmentation & Zero Trust: Define segmentation across campus, data center, cloud, and hybrid; limit lateral movement and reduce attack surface - Security Operations: Escalation point for complex incidents; investigations and root cause analysis; firewall policy reviews and recertification; support vulnerability management - Automation: Drive Security-as-Code and Network-as-Code; automate policy deployment, validation, and compliance reporting; integrate with monitoring, CMDB, SIEM, and ITSM Essential - 6–8 years in network security, with deep hands-on Fortinet expertise - Proven experience designing and operating enterprise firewall platforms at scale - Strong WAN (MPLS, SD-WAN, DIA) and cloud connectivity knowledge - Experience with IPsec/SSL/site-to-site VPNs and secure remote access - Solid grasp of Zero Trust, segmentation, and East-West/North-South traffic control - Experience with SSL/TLS inspection, SWGs, and internet edge protection - Track record leading firewall migrations and acting as incident escalation point Desirable: Fortinet NSE / CISSP / CCNP Security or similar; Security-as-Code experience; SIEM/CMDB/ITSM integration exposure