Engineer

Role Summary 

We are seeking an experienced subject matter expertise in the Fortinet. This critical role is centered on high-severity incident management, complex security troubleshooting, and architectural improvements to our network infrastructure. The ideal candidate must have proven experience with Zero-Trust principles, specifically with Zscaler (ZIA/ZPA). You will thrive in high-pressure situations and have deep, hands-on experience managing secure enterprise network environments.

Responsibilities

• Serve as the final L3 escalation point for all network related Major Incidents (MIM) and Priority-1 (P1) issues, with a primary focus on the Fortinet and Zscaler ecosystems.
• Take full ownership of the Fortinet Security Fabric, including expert-level configuration, management, and troubleshooting of FortiGate firewalls, FortiManager, and FortiAnalyzer.
• Design, implement, and manage Fortinet SD-WAN solutions, focusing on routing optimization, policy creation, failover, and performance tuning.
• Configure and maintain FortiSwitch and FortiAP deployments, ensuring seamless and secure LAN and WLAN connectivity.
• Implement, manage, and troubleshoot the Zscaler Zero-Trust platform, including Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
• Lead technical resolution during critical network outages and security incidents by hosting bridge calls and war rooms.
• Perform comprehensive root cause analysis (RCA) and deliver detailed post-incident reports to stakeholders.
• Collaborate with vendors, including Fortinet, Zscaler, and ISPs, to escalate complex issues and expedite service restoration.
• Proactively monitor network and security performance, tuning alerts and dashboards using tools like ScienceLogic.
• Partner with Information Security teams to enforce Zero-Trust policies, ensure network compliance, and maintain secure remote access.
• Participate in a 24x7 on-call rotation to provide critical support for the business.

Qualifications

• 5–8 years of hands-on experience as a Network Security Engineer in a large-scale enterprise environment.
• 2+ years of direct experience in a Major Incident Management (MIM) or L3 escalation role is required.
• Expert-level knowledge of the Fortinet Security Fabric, including FortiGate policy configuration, VPNs (IPsec/SSL), high availability (HA), FortiSwitch, FortiAP, and SD-WAN.
• Demonstrable experience with Zero-Trust architecture and hands-on expertise in implementing and managing Zscaler (ZIA and ZPA).
• Solid understanding of core networking, routing and switching protocols, including BGP, OSPF, VLANs, STP, LACP, ACLs, NAT, and QoS.
• Proficiency with ITIL frameworks, specifically Incident, Problem, and Change Management processes.
• Experience with network monitoring and analysis tools (e.g., ScienceLogic, Wireshark).

Industry certifications are highly preferred:

• Fortinet: NSE 4 / 5 / 6 or higher is strongly desired.
• Zscaler: Zscaler Certified Cloud Administrator (ZCCA) / Professional (ZCCP) is a significant plus.
• Cisco: CCNP Enterprise/Security is beneficial.

Of course. To attract candidates who are Subject Matter Experts in Fortinet technologies and also have the required Zscaler experience, the job description needs to be more focused.

Here is a revised version of the job posting tailored to the role of a Fortinet Engineer.

Role Summary We are seeking an experienced L3 Fortinet Network Security Engineer with subject matter expertise in the Fortinet Security Fabric, including FortiGate, SD-WAN, FortiSwitch, and FortiAP. This critical role is centered on high-severity incident management, complex security troubleshooting, and architectural improvements to our network infrastructure. The ideal candidate must have proven experience with Zero-Trust principles, specifically with Zscaler (ZIA/ZPA). You will thrive in high-pressure situations and have deep, hands-on experience managing secure enterprise network environments.

Key Responsibilities

• Serve as the final L3 escalation point for all network security-related Major Incidents (MIM) and Priority-1 (P1) issues, with a primary focus on the Fortinet and Zscaler ecosystems.
• Take full ownership of the Fortinet Security Fabric, including expert-level configuration, management, and troubleshooting of FortiGate firewalls, FortiManager, and FortiAnalyzer.
• Design, implement, and manage Fortinet SD-WAN solutions, focusing on routing optimization, policy creation, failover, and performance tuning.
• Configure and maintain FortiSwitch and FortiAP deployments, ensuring seamless and secure LAN and WLAN connectivity.
• Implement, manage, and troubleshoot the Zscaler Zero-Trust platform, including Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA).
• Lead technical resolution during critical network outages and security incidents by hosting bridge calls and war rooms.
• Perform comprehensive root cause analysis (RCA) and deliver detailed post-incident reports to stakeholders.
• Collaborate with vendors, including Fortinet, Zscaler, and ISPs, to escalate complex issues and expedite service restoration.
• Proactively monitor network and security performance, tuning alerts and dashboards using tools like ScienceLogic, SolarWinds, or PRTG.
• Partner with Information Security teams to enforce Zero-Trust policies, ensure network compliance, and maintain secure remote access.
• Participate in a 24x7 on-call rotation to provide critical support for the business.

Required Skills & Qualifications

• 5–8 years of hands-on experience as a Network Security Engineer in a large-scale enterprise environment.
• 2+ years of direct experience in a Major Incident Management (MIM) or L3 escalation role is required.
• Expert-level knowledge of the Fortinet Security Fabric, including FortiGate policy configuration, VPNs (IPsec/SSL), high availability (HA), FortiSwitch, FortiAP, and SD-WAN.
• Demonstrable experience with Zero-Trust architecture and hands-on expertise in implementing and managing Zscaler (ZIA and ZPA).
• Solid understanding of core networking and routing protocols, including BGP, OSPF, VLANs, ACLs, NAT, and QoS.
• Proficiency with ITIL frameworks, specifically Incident, Problem, and Change Management processes.
• Experience with network monitoring and analysis tools (e.g., ScienceLogic, SolarWinds, Wireshark).
• Industry certifications are highly preferred:
• Fortinet: NSE 4 / 5 / 6 or higher is strongly desired.
• Zscaler: Zscaler Certified Cloud Administrator (ZCCA) / Professional (ZCCP) is a significant plus.
• Cisco: CCNP Enterprise/Security is beneficial.

Ideal Candidate Profile

• Crisis Management: Demonstrates a calm, structured, and commanding presence during high-pressure incidents.
• Technical Depth: An expert in Fortinet and Zscaler technologies with a broad and deep understanding of modern network security principles.
• Collaborative Mindset: Works effectively across internal teams, vendors, and business stakeholders to drive swift resolutions.
• Clear Communicator: Provides clear, concise, and timely updates during incidents and in post-mortem documentation.
• Proactive Ownership: Goes beyond reactive fixes to identify underlying issues, recommend optimizations, and improve network resilience.