Fortinet Senior Network Engineer

About the role

The Senior Network Design & Implementation Engineer will lead the architecture, deployment, and testing of enterprise‑wide network, edge security, and SD‑WAN solutions built around the Fortinet Security Fabric. You will translate complex connectivity and compliance needs into validated designs, automated configurations, and smooth operational handovers.

Key responsibilities

• Design scalable FortiGate Secure SD‑WAN topologies (Hub‑and‑Spoke, Full Mesh, Dynamic Mesh) with automated BGP routing.
• Create SLA‑driven SD‑WAN policies, performance steering rules, and link‑health monitoring for voice, SaaS, and critical traffic.
• Integrate Fortinet Security Fabric components (FortiGate NGFW, FortiManager, FortiAnalyzer, FortiSwitch, FortiAP, FortiLAN Cloud) across edge and core.
• Implement Zero‑Trust Network Access, FortiSASE, SSL/TLS deep inspection, IPS, web filtering, and malware prevention for both local and remote users.
• Standardize underlay protocols (BGP, OSPF, VRF, NAT, IPsec) and overlay integration with existing data‑center and WAN infrastructure.
• Produce High‑Level and Low‑Level Design documents, IP/VLAN schemes, topology diagrams, and BOMs.
• Configure and stage physical and virtual FortiGate appliances using FortiManager, and author migration playbooks, cut‑over procedures, and rollback plans.
• Deploy virtual FortiGate instances in Azure, leveraging Cloud On‑Ramp and Transit Gateway architectures.

Required profile

• Extensive experience designing and implementing FortiGate Secure SD‑WAN and NGFW solutions.
• Strong knowledge of zero‑trust, edge security, and cloud connectivity concepts.
• Proven ability to produce detailed design documentation and lead migration projects.
• Hands‑on expertise with both physical and virtual Fortinet appliances.

Required skills

• FortiGate, FortiManager, FortiAnalyzer, FortiSwitch, FortiAP, FortiSASE, ZTNA
• Secure SD‑WAN, NGFW, SSL/TLS inspection, IPS, web/URL filtering, malware prevention
• BGP, OSPF, VRF, NAT, IPsec tunneling
• Azure cloud, FortiGate‑VM, Cloud On‑Ramp, Transit Gateways
• Arista Velocloud, Cisco SD‑WAN
• Visio, Lucidchart, draw.io for diagramming