Network Security Engineer

Understanding of FortiOS CLI and GUI navigation

Interface, zone, and VDOM configuration (including HA pairs such as FGT-A/B)

Firewall policy creation, review, and troubleshooting (source, destination, service, NAT, security profiles)

Routing: static routes, BGP, OSPF, and policy-based routing

Basic VPN troubleshooting (IPsec site-to-site, SSL VPN)

HA status checks (get system ha status), failover validation, and config sync

Session and traffic troubleshooting: diagnose sniffer packet, diagnose debug flow, get router info bgp, session table review

Log review and threat/event analysis via FortiAnalyzer or FortiGate logs

Firmware upgrade planning and config backup/restore

PAN-OS navigation (web UI and CLI)

Security policy, NAT policy, and Zone-based configuration

Security profiles (Antivirus, Anti-Spyware, URL Filtering, File Blocking, WildFire)

Routing: static, BGP, and OSPF on virtual routers

VPN: IPsec tunnels and GlobalProtect basics

HA (active/passive, active/active) status and failover checks

Troubleshooting tools: show session all, test security-policy-match, packet-capture, show routing route, debug dataplane, system and traffic logs

Panorama basics for centralized management

Content and PAN-OS upgrade planning

Stateful inspection, NAT (SNAT, DNAT, PAT), and zone-based design

OSI layer troubleshooting approach (ping, traceroute, packet capture, logs)

Routing protocols: BGP fundamentals (peering, AS-path, local preference, route advertisement)

IPsec and TLS basics

Asymmetric routing and how it causes dropped sessions

Change management and rollback practices

Microsoft Azure networking: VNets, peering, Route Server, ExpressRoute, VPN Gateway, Network Security Groups, and route tables (UDR)

Azure NVA deployment: Understanding of firewall appliances deployed as virtual machines in hub-spoke topologies

Route Server and BGP: Peer status, learned and advertised routes, and route preference

ExpressRoute and Global Reach: Basic understanding of circuit and peering behavior

Azure permissions and tools: Azure Portal, Azure CLI, and Network Watcher (connection troubleshoot, NSG flow logs, IP flow verify)

Routing and switching fundamentals: VLANs, subnetting, ARP, and L2 extension concepts

These map to the role’s responsibility to work with senior security engineers on protection, detection, and response.

Security policy hardening and least-privilege rule design

Threat log analysis and incident triage (IPS, malware, malicious URL, and blocked-traffic events)

Basic SIEM familiarity (Splunk, Microsoft Sentinel, or FortiAnalyzer)

Vulnerability and patch awareness for firewall OS and platform software

Incident response support: containment steps, evidence collection, and escalation

Understanding of the cybersecurity lifecycle: identify, protect, detect, respond, recover

Change execution: Following approved change plans, runbooks, and rollback steps for adds, moves, and changes

Documentation: Maintaining operating procedures, configuration records, and network diagrams

Ticketing and workflow: Using ServiceNow, Jira, or similar tools to request, track, and close work

Transitions and migrations: Supporting cutovers, parallel runs, and knowledge transfer

Coordination: Working with GITS, application owners, and senior engineers during maintenance windows

Communication: Clear status updates, escalation of blockers, and stakeholder notifications

Collecting firewall and security metrics on a routine basis (policy hit counts, blocked threats, VPN uptime, HA status, and device health)

Producing weekly or monthly reports for senior security engineers and management

Tracking change success rate, incident trends, and patch compliance

Using dashboards in FortiAnalyzer, Palo Alto Panorama or Cortex, Azure Monitor, or similar tools

You will be successful in this role if you have:

BA/BS degree and 0-2 years’ relevant experience OR equivalent combination of education and experience

Unisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.

Local employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.

If you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at [email protected]. US job seekers can find more information about Unisys’ EEO commitment here.