Managed Services Network Engineer - Fortinet

We are seeking a highly experienced Network Engineer with deep expertise in the Fortinet security ecosystem to design, implement, secure, and maintain enterprise network infrastructure. This role requires advanced hands-on skills with FortiGate firewalls and the broader Fortinet Security Fabric, along with strong troubleshooting ability in complex, multi-site environments. This engineer designs and operates resilient, secure networks at scale and brings a strong automation-first mindset. You’ll own complex network architecture and delivery, mentor junior engineers, and serve as an escalation point for the toughest issues.

Design, deploy, and manage FortiGate next-generation firewalls (NGFW) across data center, campus, cloud, and branch environments

Configure and maintain FortiManager and FortiAnalyzer for centralized policy management, logging, and reporting

Architect and support SD-WAN deployments using FortiGate SD-WAN capabilities, including performance-based routing and application steering

Implement and manage site-to-site and remote-access VPNs (IPsec, SSL-VPN)

Configure and troubleshoot routing protocols (BGP, OSPF) in conjunction with FortiGate deployments

Manage the broader Fortinet Security Fabric: FortiSwitch, FortiAP, FortiClient EMS, FortiAuthenticator, FortiSandbox, FortiWeb, FortiADC

Develop and enforce firewall policies, NAT rules, security profiles (IPS, AV, web filtering, application control)

Lead network segmentation initiatives, including Zero Trust Network Access (ZTNA) implementation

Perform firmware upgrades, patching, and lifecycle management across the Fortinet estate

Conduct root-cause analysis for complex network/security incidents; provide Tier 3/4 escalation support

Support compliance and audit requirements (PCI-DSS, HIPAA, SOC 2, NIST) as they relate to firewall/network configuration

Create and maintain network diagrams, configuration standards, and runbooks

Collaborate with security operations (SOC) teams on threat detection, incident response, and log analysis

Mentor junior engineers and contribute to change management/CAB processes

Participate in on-call rotation for infrastructure support

7–10+ years of network engineering experience, with 5+ years focused specifically on Fortinet products

2+ years in a client-facing management or account management capacity.

NSE 4 certification required; NSE 5–7 (or higher) strongly preferred

Expert-level knowledge of FortiOS configuration (CLI and GUI)

Strong understanding of TCP/IP, routing/switching, VLANs, VPNs, and network security fundamentals

Hands-on experience with FortiManager, FortiAnalyzer, and FortiGate HA clustering

Experience with SD-WAN design and implementation

Familiarity with cloud-based FortiGate deployments (AWS, Azure, or GCP)

Scripting/automation experience (Python, Ansible, or REST API) for Fortinet device management is a plus

Strong documentation and communication skills

Bachelor's degree in a related field or equivalent professional experience

Proven ability to manage multiple client accounts simultaneously with competing priorities.

Strong understanding of ITIL framework and IT service management principles.

Experience with PSA tools (e.g., ConnectWise Manage) for ticket queues.

Exceptional communication skills — written and verbal — with the ability to translate technical information for non-technical audiences.

Demonstrated ability to work across teams in a fast-paced environment.

Strong analytical skills with experience interpreting service metrics and driving data-informed decisions.

NSE 7 (Enterprise Firewall) or NSE 8

CCNP or CCIE (Cisco) as complementary networking credentials

CISSP or similar security certification

ITIL v4 Foundation certification or higher.

Prior experience working within an MSP or technology services organization.