Fortinet Network Engineer

The Fortinet Network Engineer is responsible for architecting, designing, deploying, and testing end-to-end enterprise network, edge security, and SD-WAN solutions centered around the Fortinet Security Fabric .

This role requires advanced knowledge and experience in FortiGate Secure SD-WAN with advanced next-generation firewalling (NGFW), zero-trust architecture, and cloud connectivity.

This position converts complex enterprise connectivity and compliance requirements into validated Low-Level Designs (LLDs), automated configuration templates, structured migration cutover plans, and seamless operational handoffs.

• Secure SD-WAN Design: Architect scalable FortiGate Secure SD-WAN topologies across multi-region environments, including Hub-and-Spoke, Full Mesh, and Dynamic Mesh VPN (ADVPN) structures with automated BGP routing.
• SLA & Steering Profiles: Design SD-WAN rules, Performance SLAs, link health monitoring probes, and application control steering policies using Dynamic Application Steering to optimize voice, SaaS, and critical business traffic over diverse underlays (DIA, MPLS, 5G/LTE).
• Fortinet Security Fabric Integration: Build comprehensive edge and core security layouts incorporating FortiGate NGFWs , FortiManager , FortiAnalyzer , FortiSwitch , and FortiAP (FortiLAN Cloud/Fabric extensions).
• Underlay & Overlay Integration: Standardize complex BGP (iBGP/eBGP), OSPF, VRF, NAT, and IPsec tunnel architectures integrating SD-WAN overlays with existing enterprise data centers, core switching backbones, and legacy WANs.
• Design Documentation: Develop complete High-Level Designs (HLDs), Low-Level Designs (LLDs), IP/VLAN schemes, network topology diagrams , and Bill of Materials (BOMs).

• Deployment Engineering: Configure, stage, and deploy physical and virtual FortiGate appliances utilizing FortiManager for centralized policy management, device mapping, and revision tracking.
• Migration Execution: Author detailed Method of Procedure (MOP) documents, cutover playbooks, rollback strategies, and maintenance window schedules for migrating legacy firewalls and WAN circuits to Fortinet Secure SD-WAN.
• Hybrid & Multi-Cloud Connectivity: Implement secure cloud edge connectivity, deploying virtual FortiGate instances (FortiGate-VM) in Azure using Cloud On-Ramp methodologies and Transit Gateways.
• LAN/WLAN Integration: Configure FortiSwitch and FortiAP deployments using FortiLink to deliver unified, single-pane-of-glass management through FortiGate controllers.

• Template Standardization: Build and maintain standardized CLI scripts, FortiManager Meta-Fields, Normalized Interfaces, and Jinja2 templates to enable zero-touch provisioning (ZTP) for global site rollouts.
• Infrastructure as Code (IaC): Automate policy pushes, object creation, and compliance checks using Python, Ansible, or Terraform (FortiOS/FortiManager