Fortinet Network Security engineer

Fortinet Network Security Engineer / Administrator

Job Summary:

The Network Security Engineer - Fortinet Specialist will be responsible for configuring, managing, and supporting Fortinet network infrastructure components, including FortiGate firewalls, FortiSwitches, and FortiAPs, in addition to overseeing passive network elements. This role ensures optimal security and performance of the organization's network infrastructure, proactively manages security policies, and troubleshoots any network issues. The ideal candidate has experience with Fortinet products and passive network management, with a focus on high availability, security, and performance.

Key Responsibilities:

1. Firewall Management (FortiGate):

• Configure, manage, and monitor FortiGate firewalls, including security policies, VPNs, IDS/IPS, antivirus, web filtering, and application control.
• Perform regular firmware updates and patches to maintain optimal performance and security.
• Analyze and respond to security events and incidents, adjusting firewall configurations to mitigate threats.
• Implement and manage VPN connections (site-to-site and remote access).
• Conduct regular firewall audits, generate reports, and ensure compliance with internal and external security standards.

2. Switch Management (FortiSwitch):

• Configure and maintain FortiSwitches, ensuring integration with FortiGate firewalls for seamless network security.
• Monitor switch performance, troubleshoot connectivity issues, and optimize network traffic.
• Implement VLANs, quality of service (QoS) policies, and Layer 2/3 security measures.
• Perform firmware updates and regular health checks on switches.

3. Wireless Management (FortiAP):

• Deploy, configure, and manage FortiAP devices, ensuring optimal wireless coverage and secure access.
• Enforce wireless security policies, monitor network usage, and manage guest networks.

4. Passive Network Infrastructure:

• Oversee passive network elements such as cabling, patch panels, racks, and other physical network infrastructure.
• Ensure network cabling is organized, labeled, and meets industry standards.
• Coordinate with vendors for structured cabling projects and manage physical infrastructure documentation.
• Perform routine inspections of passive network components to maintain high reliability.

5. Monitoring and Incident Response:

• Implement and use network monitoring tools to track performance, availability, and security incidents.
• Develop and maintain network documentation, including network diagrams, device configurations, and security policies.
• Respond to network incidents, perform root cause analysis, and implement corrective actions.
• Conduct routine backups of network configurations and system logs.

6. Collaboration and Support:

• Work closely with IT and security teams to develop, implement, and enforce network security policies.
• Provide Level 2/3 support for network issues and assist in troubleshooting escalated incidents.
• Train IT staff on network security best practices and Fortinet device usage where applicable.

7. Documentation and Reporting:

• Maintain up-to-date documentation on network configurations, security policies, and infrastructure changes.
• Generate regular reports on network performance, security incidents, and firewall policy usage.

Qualifications:

• Experience:

  3+ years of experience managing Fortinet products (FortiGate, FortiSwitch, FortiAP) and passive network infrastructure.

• Skills:

• Strong knowledge of network security principles, firewall management, VPNs, and wireless networking.
• Proficiency in Fortinet products (FortiGate, FortiSwitch, FortiAP) and FortiOS operating system.
• Familiarity with network monitoring and incident response tools.
• Experience with passive network components such as structured cabling, patch panels, and physical network management.
• Ability to work independently and troubleshoot complex network issues.

This role requires strong problem-solving skills, a deep understanding of Fortinets security ecosystem, and the ability to maintain high security standards across network infrastructures