General Description

We are looking for a skilled Fortinet Network Security Engineer to support our Network Security & PKI Practice in designing, implementing, and managing Fortinet based security solutions for our managed service and consulting clients. This role will engage in the development of resilient firewall, VPN, and SD-WAN architectures while providing “Wow Them” service to clients and/or internal customers or co-workers.

The Fortinet Network Security Engineer will be required to demonstrate strong troubleshooting, communication, and documentation skills, lead by influence, and strong business/financial acumen to drive the use of progressive network security programs that will align the delivery with business objectives and priorities.

About the Network Security & PKI Practice - North Central region

The Network Security & PKI Practice is responsible for designing, deploying, and operating the network security and encryption technologies that protect our clients’ environments. We deliver firewall, secure connectivity, segmentation, and public key infrastructure solutions across the organization and for our managed service and consulting clients.

Our team of network security engineers, consultants, and architects focuses on next generation firewalls, SD-WAN, secure remote access, and zero trust architecture across leading vendor platforms. We partner with client stakeholders, delivery teams, and internal practices to translate security requirements into reliable, well documented outcomes.

Current initiatives and areas of focus include:

• Delivering managed Fortinet security services across multi-tenant, multi-client environments
• Advancing zero trust architecture and network segmentation for clients in regulated industries
• Standardizing repeatable, well documented deployment and operational practices

Roles and Responsibilities:  

• Design, implement, and support network security solutions using Fortinet technologies (FortiGate, FortiManager, FortiAnalyzer, FortiSwitch).
• Configure and manage firewall policies, VPNs (IPSec/SSL), SD-WAN, and UTM features.
• Utilize FortiManager for centralized management and policy deployment across multiple FortiGate devices.
• Use FortiAnalyzer for event correlation, log analysis, and reporting.
• Perform regular health checks, upgrades, and policy audits on Fortinet equipment.
• Support networking infrastructure, including switching, VLANs, static and dynamic routing (OSPF, BGP), and subnetting.
• Troubleshoot network and security issues across multiple clients or environments.
• Collaborate with clients and internal teams to recommend and implement security best practices.
• Document configurations, diagrams, and standard operating procedures.

Required Experience and Education: 

• 2+ years of hands-on experience with Fortinet security technologies (FortiGate, FortiManager, FortiAnalyzer, FortiSwitch).
• Solid understanding of core networking concepts: subnetting, NAT, routing protocols (OSPF, BGP), switching, and VLANs.
• Experience with firewall policy creation, security profiles, and VPN configurations.
• Strong troubleshooting, analytical, written, and verbal communication skills.
• Basic Fortinet certification required prior to hire (NSE 4 or higher preferred).
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive better business outcomes.

Preferred Experience and Education 

• Experience with multi-tenant firewall environments and managing clients in regulated industries.
• Familiarity with FortiAP, FortiClient EMS, and FortiAuthenticator.
• Exposure to network segmentation, zero trust architecture, or compliance-driven security implementations.
• Experience working with MSPs or in a consulting/VAR role.

Travel Requirements:

• Up to 25% travel

Physical Requirements:

• Sedentary work
• Substantial movement of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have close visual acuity to view computer terminal and/or extensive reading for a minimum of 8 hours a day

Note: Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa for this role.