Senior IT Engineer - Network and Security

Configure manage and maintain Forti Gate firewalls across the Ministry HQ and branch sites including security policies NAT traffic inspection and UTM features

Design deploy and support site-to-site VPN SSL VPN and remote access and implement ZTNA Zero Trust Network Access to secure user and device access

Manage Fortinet access points through Forti Gate wireless controllers including SSID setup WPA2 WPA3 encryption and authentication methods such as 802 1X PSK and captive portal

Use Forti Manager to manage devices push configurations and keep security policies consistent across all sites

Use Forti Analyzer to collect and analyze logs track network performance and alerts and produce regular security and compliance reports

Apply Fortinet s AI-assisted management tools to support policy orchestration configuration compliance checks and automated workflows that cut manual effort and errors

Run security reviews to find misconfigurations outdated rules and vulnerabilities then recommend and carry out improvements to strengthen the network

Make sure all deployments follow Fortinet best practices and the organization s security policies and standards including audit and regulatory requirements

Act as the escalation point for network and security incidents diagnose root causes restore services quickly and meet the SLAs set for the FMS contract

Maintain network diagrams configuration records and SOPs train internal teams and customer staff and work as a customer advocate to understand and address their security needs

10+ years in IT networking and security, with at least 5 years of hands‑on work managing Forti Gate firewalls across multi‑site (HQ and branch) environments, ideally in a government or large enterprise setting.

Strong working knowledge of Forti Gate, Forti Manager, and Forti Analyzer, plus Fortinet wireless (FortiAP). Proven skills in site‑to‑site VPN, SSL VPN, ZTNA, WPA2/WPA3, and 802.1X authentication.

Fortinet NSE 4 (mandatory in practice), with NSE 6 or NSE 7 preferred. Other certifications such as CCNP Security, CompTIA Security+, or CISSP are an added advantage.

Experience in vulnerability assessment, security audits, and policy compliance, with the ability to spot misconfigurations and recommend improvements. Exposure to ISO 27001 environments is a plus.