Fortinet Firewall Engineer

Role summary

Experience and certification

• Requires 5–8 years in network security, including 3+ years of hands-on Fortinet firewall administration and support.
• Fortinet NSE 4 or FCP certification is mandatory.
• NSE 5/6 or FCSS and CCNP Security or CISSP are preferred.

Key responsibilities

• Provide L3 support for FortiGate firewalls and related security infrastructure.
• Manage firewall policies, NAT, IPS, VPNs, web filtering, and security profiles.
• Perform advanced troubleshooting, root cause analysis, and incident resolution.
• Implement firewall changes, upgrades, migrations, and HA configurations.
• Review firewall rules, harden systems, conduct security audits, and support vulnerability remediation and compliance.
• Work with SOC, infrastructure, and application teams to secure business services.
• Maintain technical documentation and operational procedures; mentor L1/L2 engineers.

Mandatory skills

• FortiGate firewall administration, FortiManager, and FortiAnalyzer.
• IPSec VPN, SSL VPN, firewall policy and NAT management.
• BGP, OSPF, high availability, network security, and segmentation.
• Troubleshooting, root cause analysis, log analysis, and incident response.

Preferred skills

• FortiWeb, FortiMail, FortiNAC, SD-WAN, Azure/AWS network security, and Python/PowerShell automation are good to have.

Competencies

• Strong analytical and problem-solving skills; able to handle critical incidents independently.
• Stakeholder communication, documentation, and mentoring of L1/L2 engineers.

Operational deliverables