Senior Network Engineer - Fortinet SD-WAN & Security Fabric

About the role

The Senior Network Design & Implementation Engineer architects, designs, deploys and tests end-to-end enterprise networks, edge security and SD-WAN solutions centred on the Fortinet Security Fabric. As a senior technical lead, the role turns complex connectivity and compliance requirements into validated Low-Level Designs, automated configuration templates, migration cutover plans and operational handoffs. It calls for advanced knowledge of FortiGate Secure SD-WAN, NGFW, zero trust and cloud connectivity, and familiarity with Arista Velocloud and Cisco SD-WAN.

Key responsibilities

• Architect FortiGate Secure SD-WAN topologies (Hub-and-Spoke, Full Mesh, Dynamic Mesh VPN) with automated BGP routing, and design SLAs, link health probes and application steering policies.
• Integrate FortiGate NGFW, FortiManager, FortiAnalyzer, FortiSwitch and FortiAP, and design ZTNA, FortiSASE, SSL/TLS inspection, IPS and web filtering.
• Standardize BGP, OSPF, VRF, NAT and IPsec architectures, and produce HLDs, LLDs, topology diagrams and bills of materials.
• Configure and deploy FortiGate appliances via FortiManager, write migration playbooks and cutover procedures, and set up cloud edge connectivity with FortiGate-VM in Azure.
• Build CLI scripts, Jinja2 templates and IaC (Python, Ansible, Terraform) for zero-touch provisioning.
• Run acceptance and failover tests, author SOPs and runbooks, train Tier-2/3 operations and NOC teams, and act as escalation point for outages and TAC cases.

Required profile

• Bachelor's degree in Computer Science, Network Engineering or IT, or equivalent experience.
• 8+ years in enterprise network engineering, with a focus on security design and multi-site WAN transformation to SD-WAN.
• 6+ years of hands-on architectural and implementation experience with Fortinet products.
• Familiarity with Arista Velocloud to support integration and eventual migration.
• Preferred: FCSS (Network Security or Secure SD-WAN), FCX/NSE 8, CCIE Enterprise Infrastructure or Security, CCNP Enterprise/Security.

Required skills

• Fortinet ecosystem: FortiGate (FortiOS), FortiManager, FortiAnalyzer, FortiSwitch, FortiAP, FortiClient
• SD-WAN, ADVPN, BGP, OSPF, VRF, VXLAN, EVPN, IPsec, NAT, IPv6, QoS
• Automation: Python, Ansible, Terraform, REST APIs