Senior Firewall / Security Network Engineer

Overview

As a Senior Firewall / Security Network Engineer, you will own the design, delivery and operation of the firewall and security network estate across on-premises data centers and cloud (AWS, OCI). You will shape the firewall architecture for hybrid connectivity and manage day-to-day changes and incident response to keep services secure and reachable. You will drive the migration of a multi-vendor estate to FortiGate for standardized security across environments and support the cloud security layer essential to our AWS migration. You collaborate with security, cloud and platform teams to embed secure, scalable network policies into migration plans and operations.

Responsibilities

• Design and deliver firewall/security layer for cloud/hybrid connectivity (AWS TGW, VPC, GWLB; OCI; on-prem).
• Own route/prefix and policy design across cloud/on-prem boundaries to ensure secure, consistent traffic flows.
• Translate connectivity requests into standards-based firewall policies (allow/NAT/port/service, TLS).
• Manage changes through RP process with testing and rollback plans; peer-review changes; minimize one-off exceptions.
• Lead migrations from Cisco/Juniper to FortiGate; plan and execute quarterly upgrades and hardware refreshes.
• Triage and resolve connectivity incidents (blocked traffic, TLS issues, VPN outages, firewall failovers).
• Admin out-of-band management network for firewalls; ensure reachability and monitoring.
• Integrate firewalls with logging/monitoring (FortiAnalyzer, SIEM, netflow, SNMP) and address misconfigurations.

Key requirements

• Hands-on FortiGate / FortiOS expertise (VDOMs, security policy, NAT, SSL inspection, FortiAnalyzer, FortiConverter)
• Cloud network security design in AWS (TGW, VPC, GWLB) and/or OCI, including hybrid on-prem/cloud flows
• Disciplined change management: implementation, testing, rollback, peer review
• Strong connectivity troubleshooting across packet path (drops, TLS, DNS, routing)
• Ability to work with application, database, cloud and security teams to translate requirements into secure policies

• Cross-functional collaboration
• Problem-solving
• Clear communication
• FortiGate / FortiOS
• FortiAnalyzer
• FortiConverter

…