Senior Network Security Engineer

Tips: Provide a summary of the role, what success in the position looks like, and how this role fits into the organization overall.

The Senior Network Engineer will be responsible for implementing and troubleshooting enterprise network infrastructures with a strong focus on Fortinet firewalls, SD-WAN technologies, and network performance optimization. The role requires hands-on expertise in resolving complex connectivity issues, monitoring WAN usage, and ensuring secure and efficient traffic flow across multi-site environments.

Key Responsibilities:

Network Troubleshooting & Support

Diagnose and resolve complex network connectivity issues across LAN/WAN environments.

Perform root cause analysis for network latency, routing, and packet loss issues.

Troubleshoot user authentication and access control problems.

Firewall & Security Management

Administer, configure, and maintain Fortinet Firewalls (FortiGate, FortiManager, FortiAnalyzer).

Analyze firewall traffic logs to identify where traffic is being blocked and determine which firewall rules or policies are responsible.

Modify or create rules and policies as needed to ensure optimal security and connectivity.

Set up and maintain Site-to-Site VPNs and IPSec tunnels over SD-WAN.

Implement SD-WAN load-balancing methods and link failover configurations.

Network Configuration & Optimization

Configure VLANs, trunk ports, and inter-VLAN routing.

Manage WAN bandwidth usage, identify top talkers, and apply bandwidth restrictions or QoS policies as needed.

Maintain clear visibility into network traffic flow across sites.

SD-WAN Administration

Troubleshoot Fortinet SD-WAN performance and routing issues.

Optimize path selection and load-balancing based on link health and business-critical applications.

Documentation & Monitoring

Maintain detailed documentation of network topology, device configurations, and traffic flow diagrams.

Use monitoring tools to proactively detect and resolve network performance issues.

Generate reports on bandwidth utilization, link performance, and incident resolutions.

Key Skills & Competencies:

Strong troubleshooting ability across LAN, WAN, and VPN environments.

Deep understanding of Fortinet Firewalls (FortiGate/SD-WAN) – policy configuration, UTM, routing, and VPNs.

Expertise in network traffic analysis, packet capture, and bandwidth utilization monitoring.

Clear understanding of end-to-end traffic flow and network segmentation.

Experience with IPSec, SD-WAN load balancing, and dynamic routing protocols (BGP, OSPF preferred).

Familiarity with user authentication protocols (RADIUS, LDAP, SSO).

Excellent analytical, communication, and documentation skills.

Qualifications:

Bachelor’s degree in Computer Science, Information Technology, or related field.

5+ years of hands-on experience as a Network Engineer (minimum 4+ years with Fortinet Firewalls/SD-WAN).

Fortinet NSE4/NSE5 certification highly preferred.

Knowledge of Cisco, Juniper, or other networking platforms is a plus.

Preferred Tools & Platforms:

FortiGate / FortiManager / FortiAnalyzer

Wireshark or equivalent packet analysis tools

Network performance monitoring tools (e.g., SolarWinds, PRTG, Zabbix)