Level 2 Network Engineer

We are seeking a Network Engineer (Level
2) with solid hands‑on experience in firewall and IP networking who has exposure to Fortinet technologies (e.g., Forti Gate). The successful candidate will provide L2 support, configuration, and troubleshooting across enterprise network and security infrastructure, focusing on firewall policies, VPNs, and core routing/switching.

• Provide Level 2 support for escalated network and security incidents, including firewalls, VPNs, and connectivity issues.
• Configure, maintain, and troubleshoot Fortinet Forti Gate firewalls (policies, NAT, VPNs, UTM features) and related network components.
• Manage and optimize firewall rules, security policies, and VPN configurations (IPSec/SSL) in line with best practices.
• Perform advanced troubleshooting using packet captures, logs, and monitoring tools (e.g., Wireshark, syslog, SIEM, Solar Winds/PRTG).
• Support core routing and switching (TCP/IP, VLANs, OSPF/BGP basics, DHCP, DNS, QoS) to ensure stable and secure network operations.
• Implement approved changes in production environments, including firewall changes, network configuration updates, and VPN deployments.
• Collaborate with L1 engineers as an escalation point and with senior/L3 engineers on complex or design‑level issues.
• Create and maintain clear technical documentation, including network diagrams, standard operating procedures, and change records.
• Generate and review security and compliance reports using firewall logs and reporting tools (e.g., Forti Analyzer or similar).
• Communicate incident status, risks, and remediation steps effectively to internal stakeholders and, where applicable, customers.

• 3–5 years of experience in network engineering or network security operations, with at least some hands‑on Fortinet firewall experience.
• Practical experience configuring and supporting Fortinet Forti Gate firewalls (policies, VPNs, NAT, basic UTM features).
• Strong understanding of networking fundamentals: TCP/IP, VLANs, routing (static, OSPF/BGP basics), DNS, DHCP, NAT.
• Experience with IPsec and SSL VPN configuration and troubleshooting.
• Familiarity with core security concepts: firewalling, IPS/IDS, content filtering, application control, and threat prevention.
• Ability to use network analysis tools (e.g., Wireshark/Ethereal) and monitoring platforms for diagnostics and performance tuning.
• Solid written and verbal communication skills for documentation, incident updates, and stakeholder‑facing communication.
• Bachelor’s degree in Computer Science, Information Technology, or related field (or equivalent experience).

• Fortinet NSE 4 certification or higher; NSE 5/6 modules considered an advantage.
• Experience with additional Fortinet products such as Forti Manager and Forti Analyzer.
• Exposure to other firewall platforms (Cisco ASA, Palo Alto, Check Point, Meraki, Juniper).
• Experience with SD‑WAN concepts and deployments, ideally in Fortinet environments.
• Knowledge of scripting/automation (e.g., Python, Ansible) for network operations and configuration management.
• Familiarity with ITIL processes and ITSM tools (e.g., Service Now, Jira).
• Additional networking/security certifications (e.g., CCNA, Network+, ITIL Foundation).

• Level 2, operational‑focused role with responsibility for handling escalated issues and implementing changes, not just monitoring.
• Works in a fast‑paced, mission‑critical environment supporting enterprise or MSP customers.
• Typically part of a broader network/security team with clear escalation paths to L3/architecture.