Sr. Network & Security Engineer

The Sr. Network and Security Engineer will work to implement network strategies to support business needs in a secure and cost-effective manner, as well as the ability to perform administration, support, and in-depth troubleshooting of listed technologies.

Fortinet Network & Security Engineering

• Design, implement, and support Fortinet firewalls (Forti Gate), VPNs, security policies, HA, and micro‑segmentation.

• Manage Forti Switch and Forti
  
  AP environments including VLANs, Wi‑Fi, QoS, and secure segmentation.

• Utilize Forti Analyzer and Forti Manager for centralized logging, reporting, and configuration management.

• Support Forti Mail for secure email, anti‑phishing, and anti‑spam.

• Build and maintain Fortinet SD‑WAN for multi‑site connectivity and carrier diversity.

WAN, VPN, SASE & Edge Connectivity

• Administer Cato VPN / Cato SASE for user and site connectivity.

• Engineer multi‑carrier BGP for high availability, redundancy, and traffic engineering.

• Troubleshoot complex connectivity issues across sites, cloud, and remote users.

Data Center & Storage Networking

• Support Cisco MDS Fibre Channel switches, zoning, and fabric management.

• Collaborate with storage/server teams to ensure reliable SAN performance.

Load Balancing & Application Delivery

• Configure and support F5 load balancers including VIPs, pools, SSL offload, and monitoring.

• Manage Kemp Load Master appliances for internal and external workloads.

• Partner with application owners to design highly available, load‑balanced solutions.

Virtualization & Network Virtualization

• Support VMware networking (vSphere, vCenter, vDS, NSX), VLANs, routing, and micro‑segmentation.

• Assist with performance tuning and capacity planning.

Cloud Edge & Security

• Configure Cloudflare DNS, WAF, Zero Trust, CDN, and DDoS protections.

• Optimize Cloudflare rules to enhance both security and performance.

Monitoring, Observability & SOC Support

• Maintain Logic Monitor (or similar tools) for monitoring and alerting.

• Build observability across SNMP, Net Flow/sFlow/IPFIX, syslog, and dashboards.

• Support Crowd Strike endpoint protection and coordinated remediation.

• Onboard log sources into a next‑gen SIEM and fine‑tune alerts, correlation rules, dashboards, and detection workflows.

• Contribute to network/SOC runbooks, standards, and escalation paths for 24×7 monitoring.

ITSM, Documentation & Operations

• Act as Tier 3/4 escalation for complex network and security incidents.

• Manage incidents, changes, and problems using ITSM tools (e.g., Zendesk).

• Document network topologies, design standards, IP schema, and firewall/SD‑WAN policies.

• Create knowledge base articles and support documentation for operational excellence.

• Participate in an on‑call rotation and support after‑hours deployments.

Cross‑Functional Collaboration

• Work closely with teams across cloud, security, Dev Ops, helpdesk, field services, and application groups.

• Translate technical concepts into clear communications for both technical and non‑technical audiences.

This person can be located in Dallas, TX or Phoenix, AZ

Qualifications

• 7+ years of experience in enterprise or multi‑site network and infrastructure engineering.

• Fortinet expertise including Forti Gate (policies, VPNs, SD‑WAN, HA, segmentation/micro‑segmentation), Forti Switch, Forti
  
  AP, Forti Analyzer, Forti Manager, and Forti Mail; experience with Fortinet deployments and migration projects.

• SASE & VPN experience with Cato or comparable cloud‑based SASE/VPN platforms.

• Advanced routing skills, including hands‑on multi‑carrier BGP for redundant ISP connectivity and failover.

• Strong experience in network segmentation and micro‑segmentation (Fortinet, VMware NSX, or similar).

• Hands‑on experience with Cisco MDS Fibre Channel switches in SAN environments.

• Proficiency with load balancing, including F5 and Kemp Load Master.

• Strong VMware networking background (vSphere/vCenter, vDS, VLANs, routing, NSX or similar).

• Working knowledge of Cloudflare (DNS, WAF, CDN, reverse proxy).

• Practical experience with enterprise monitoring and security tools, including:

  • Logic Monitor or similar NMS/NPM

  • SNMP, Net Flow/flow monitoring

  • Crowd Strike, syslog ingestion, and NG‑SIEM platforms

• Experience serving as a Tier 3/4 escalation resource and incident lead for complex network/security issues.

• Experience using Zendesk or similar ITSM tools for incident, request, and change management.

• Experience contributing to or helping build a NOC/SOC or network monitoring function.

• Strong understanding of core network technologies including TCP/IP, routing (BGP/OSPF), switching, VLANs, STP, QoS, VPNs, and firewall rule design/segmentation.

• Excellent cross‑functional collaboration and communication skills, with the ability to translate technical concepts for varied audiences.

• Strong documentation skills, including network diagramming (Visio, Lucidchart, etc.).

• Proven ability to lead medium‑to‑large infrastructure projects from design through implementation.

#J-18808-Ljbffr