Solution Architect

Solution Architect - Secure Networking - India
Gurgaon / NCR

As a member of the Subject Matter Expert (SME) Engineering Department, you will work closely with the Account Team to position our Portfolio of Secure Networking Solutions consisting of NAC, Wireless, Switches, Identity and Access Management(AAA), and Voice solution components, drive field Systems Engineers (SE) in their projects and report product evolution requests to Consulting Systems Engineering (CSE) team.

**Responsibilities**:

- Member of the SME team which covers India region (India & SAARC Region)
- Expected to work from the office three days per week. This enables collaboration with the extended teams, fostering trusted relationship and teamwork.
- Second level of pre-sales support assisting the field SE organization:

- in responding to RFPs/RFIs: design, solution specification, product information.
- in supporting key projects to ensure Fortinet's success.
- in leading technical discussions, articulating the technology and demonstrating differentiated value.
- in conducting compelling solution presentations, demonstrations and POC (Proof of Concept).
- Hands on assistance
- Responsible for building technical materials to support sales activities (slideware, solution brief, white papers, success stories, technical notes, competitive comparison etc.) and designing Internal workshops.
- Perform External workshops & PoCs for prospects or customers on product evaluations and do demonstrations, in collaboration with Account SE.
- Perform hands-on tests to validate network designs, customer proof-of-concept setups and network deployments for new products and feature.
- Effectively disseminate product knowledge to the Sales Team and Channel.
- Point of contact for the CSE team: responsible to report and consolidate customer needs across India region, validate business cases, write, and escalate feature requests.
- Report project activities, analyze project trends and provide market vision.
- Participate in the development of commercial strategies.
- Ability to Travel at a short notice, as required within India region.
- Collect information on competitive solutions, products, and services and update the Channel and Account team

**Requirements**:

- At least 10 years of experience in a Senior SE, Consulting SE, Technical role within the Networking or IT Security industries.
- Vendor and SI experience.
- Expertise in designing, proposing, demonstrating and conducting Proof of Concept for Network Access Control (NAC) solution to customers
- Experience with Wireless technology, design, site survey, implementation, and troubleshooting.
- Proficiency in designing and proposing DataCenter, Campus and Branch switching solutions
- Experience in Identity and Access management solutions(AAA) solutions related to NAC, Wireless and switches.
- Knowledge of pitching ZTNA technology, SD-Branch
- Switching: VXLAN, MCLAG, ACL’s, QOS, Port Security(802.1x authentication), Stacking. IEEE 802.1Q VLAN Tagging, IEEE 802.3af/at/bt, PoE budget calculations, IEEE 802.3ad/ax/ae, LLDP/MED/MAC Sec, STP, RADIUS CoA, DHCP Snooping, IEEE 802.3z/ab/ae/az/bz/ba/bg/bm, Split port, Port Fast, Private VLAN, Storm Control, LoopGuard, IEEE 802.1ad QinQ, IGMP/Dhcp snooping.
- Strong fundamental understanding of TCP/IP(IPv6), Switching, WLAN, Network Security and Authentication
- Advanced Technical understanding of Routing Protocols, specifically OSPF & BGP
- Experience in IP Voice solutions would be an added advantage.
- Hands-on experience in NGFW / UTM / Threat prevention
- Knowledge in some of the following areas of specialization:

- Basic knowledge of MDM solutions, IoT solutions, MAC Address Bypass, LAN Micro-segmentation, SNMP, MIB OIDs etc
- Wireless: Must have deep understanding in IEEE 802.11a/b/g/n/ac/ax/be, IEEE 802.11e/h/i/k/r/v, CAPWAP, BLE/Zigbee, EAP-TLS, EAP-TTLS/MSCHAPv2, PEAPv0/EAP-MSCHAPv2, PEAPv1/EAP-GTC, EAP-SIM, EAP-AKA, EAP-FAST, WPA, WPA2, and WPA3 with 802.11, Wireless Controller Architecture (campus and remote AP deployment), Basic understanding of Wireless spectrum analyser and WIPS, OFDMA, Spatial Reuse, UL MU-MIMO, DL- MU-MIMO.
- AAA: RADIUS and LDAP Authentication, Certificate based authentication for wired and wireless deployment, SAML authentication, Single Sign-On User Identification Methods, Two-factor authentication, Onboarding techniques of BYOD and IOT devices.
- IPSec Encryption, Basics on IPv6, Multicast, NAT, VRF, VoIP, QoS, LTE/5G, Packet Capture/Analysis Tools, SSL/TLS.
- Scripting knowledge using Python / Bash / PowerShell / Golang or alternative
- Administrative knowledge of Linux
- Knowledge of Public Cloud concepts in technologies like GCP, Azure and AWS
- Knowledge of Private Cloud concepts in technologies like VMWare and KVM
- Strong presentation skills to executives & consulting skills
- Demonstrate extensive hands-on level skills in deploying and troubleshooting complex networks
- Setup labs to learn and evaluate new technolog