Perimeter Design Engineer

Perimeter Design Engineer

A highly experienced Perimeter Design Engineer is sought to support enterprise cybersecurity initiatives through advanced design, engineering, and governance of perimeter security solutions. This senior-level role involves developing scalable, secure, and resilient firewall architectures and leading technical projects focused on modernization, network segmentation, and security infrastructure. The engineer will serve as a technical leader, ensuring solutions meet security standards, operational efficiency, and business objectives across the organization.

Responsibilities:

• Develop comprehensive High-Level Design (HLD) and Low-Level Design (LLD) documentation for perimeter security firewall solutions.
• Define and establish architecture standards, engineering guidelines, and technical roadmaps for firewall and security platform deployment.
• Conduct technical assessments to analyze business requirements, security risks, scalability needs, and infrastructure dependencies.
• Design and configure firewall policies, NAT strategies, VPN connections, segmentation, and DMZ architectures.
• Lead architecture reviews, design validation sessions, and ensure compliance with enterprise security policies and standards.
• Collaborate with cross-functional teams including Security Architecture, Infrastructure, Cloud, and Applications to deliver integrated security solutions.
• Support the lifecycle management of security platforms, including hardware refreshes, software updates, and platform migrations.
• Develop, maintain, and promote engineering standards, reference architectures, design templates, and operational best practices.
• Evaluate emerging technologies and provide actionable recommendations for future security infrastructure enhancements.
• Mentor and guide implementation and operations teams on best practices and standard design principles.

Qualifications:

• Deep expertise with Fortinet security platforms including Forti Gate, Forti Manager, Forti Analyzer, SD-WAN, high availability architectures, and Security Fabric.
• Advanced knowledge of Check Point firewall technologies such as Security Gateways, Smart Console, Management Servers, ClusterXL, VPN, NAT, and policy design.
• Strong understanding of enterprise DMZ architectures, perimeter security design principles, and TCP/IP networking fundamentals including routing protocols (OSPF, BGP).
• Experience designing secure segmentation and micro-segmentation solutions.
• Proven ability to translate complex technical requirements into scalable, operationally efficient solutions.
• Excellent communication skills for technical discussions, architecture reviews, and stakeholder engagement.
• Experience with network routing, switching, load balancing, and UNIX/Linux administration.
• Relevant certifications:
  Fortinet (FCP, FCSS, FCX, NSE 4-8).
• Check Point certifications (CCSA, CCSE, CCSM) are a plus.
• Knowledge of Zero Trust Architecture principles and automation tools such as Python and Ansible preferred.
• Minimum of three (3) years' experience in network and security engineering roles, with significant exposure to internetworking technologies.
• Bachelor's degree or equivalent work experience in cybersecurity, IT, or related field.
• Must be legally authorized to work in the United States.

Publishing Pay Range: $58.00 – $60.00 Hourly

This is a fully remote role and can be performed from an approved location.