Firewall Specialist; fortinet

The Senior Network Security Engineer is responsible for architecting, deploying, and centrally managing enterprise-grade security infrastructure with a primary focus on the Fortinet Security Fabric. This role serves as the subject matter expert for Forti Manager, spearheading the design and execution of automated Zero-Touch Provisioning (ZTP) workflows and Secure SD-WAN deployments across extensive data center, campus, and branch environments.

• Design and scale automated Zero-Touch Provisioning (ZTP) pipelines to accelerate the deployment of Forti Gate firewalls and branch infrastructure.
• Administer Forti Manager centralized environments, establishing standardized Administrative Domains (ADOMs), device life-cycle tracking, provisioning templates, CLI scripts, and policy packages.
• Develop and maintain meta-fields, variables, and runtime scripts within Forti Manager to ensure highly adaptive, programmatic edge configuration rollouts.

• Deploy and operate Forti Gate firewalls in High Availability (HA) clusters, Virtual Domains (VDOMs), and multi-tenant architectures.
• Architect Fortinet Secure SD-WAN, including overlay link design, SLA-based path selection rules, application steering, and Auto-Discovery VPN (ADVPN).
• Integrate and maintain the broader Fortinet stack, including Forti Switch, FortiAP, and Forti Analyzer.
• Implement Zero-Trust Network Architecture (ZTNA) and robust micro-segmentation strategies across hybrid environments.

• Analyze telemetry data from Forti Analyzer to construct operational dashboards, security event correlation models, and long-term compliance audit reporting.
• Lead technical project delivery, conduct vulnerability assessments, and act as a Tier-3 escalation point for critical network or security outages.
• Mentor junior engineering staff and establish consistent configuration standards, runbooks, and architectural documentation

• Deep, expert-level competency in Forti Manager and Forti Gate, with documented experience designing complex configuration templates and ZTP blueprints.
• Advanced knowledge of core networking protocols, including BGP, OSPF, IPsec VPNs, advanced routing/switching, and SD-WAN path management.
• Proficiency with scripting languages (e.g., Python, Jinja2, Ansible, or Forti Manager CLI scripting) used to optimize network automation workflows.
• Strong understanding of security frameworks (such as NIST, ISO 27001, or PCI-DSS) to ensure automated templates strictly enforce organizational compliance.