Specialist Security Engineer – Fortinet Solutions

About the role

The Specialist Security Engineer – Fortinet Solutions will design, implement, optimise and support advanced Fortinet‑based cybersecurity solutions for enterprise, service‑provider and data‑center environments. Working within ZainTECH’s Cybersecurity Practice, you will act as the technical subject‑matter expert, guiding customers through architecture, deployment and ongoing optimisation.

Key responsibilities

• Design and implement secure, scalable, high‑availability security architectures using Fortinet technologies.
• Develop High‑Level and Low‑Level Designs, migration plans and technical documentation.
• Lead installation, configuration, migration and optimisation of FortiGate, FortiManager, FortiAnalyzer, FortiSwitch, FortiAP, FortiWeb, FortiADC, FortiPAM, FortiProxy, FortiDLP, FortiSIEM, FortiSASE and FortiAppSec.
• Integrate Fortinet platforms with Active Directory, LDAP, RADIUS, TACACS+, IdPs, MFA, SIEM, Syslog, AWS and Azure.
• Provide L2/L3 escalation support, troubleshoot security incidents, firewall, routing, VPN and authentication issues.
• Conduct security assessments, recommend best‑practice improvements and ensure solution performance and availability.

Required profile

• Proven experience as a security engineer or architect with deep knowledge of Fortinet product portfolio.
• Strong background in enterprise network security, SD‑WAN, SASE, Zero Trust and micro‑segmentation.
• Hands‑on experience with cloud environments (AWS, Microsoft Azure) and integration of identity and access management solutions.
• Ability to produce detailed design documentation and lead complex migration projects.

Required skills

• FortiGate, FortiManager, FortiAnalyzer, FortiSwitch, FortiAP, FortiWeb, FortiADC, FortiPAM, FortiProxy, FortiDLP, FortiSIEM, FortiSASE, FortiAppSec
• Active Directory, LDAP, RADIUS, TACACS+
• Identity Providers (IdP), Multi‑Factor Authentication (MFA) platforms
• SIEM and Syslog integration
• AWS, Microsoft Azure
• Network security, SD‑WAN, SASE, Zero Trust Network Access (ZTNA), HA deployments, micro‑segmentation