Fortinet Network Security Engineer

About the role

Rozmith is seeking a hands‑on Fortinet Network Security Engineer to design, deploy and support Fortinet security solutions for its clients. You will own the day‑to‑day health of FortiGate firewalls and the broader Fortinet Security Fabric, act as a technical escalation point, and work directly with customers to harden and improve their network security posture.

Key responsibilities

• Deploy, configure and maintain physical and virtual FortiGate firewalls, including HA clusters, SD‑WAN and multi‑site topologies.
• Administer FortiManager, FortiAnalyzer, FortiSwitch, FortiAP and FortiClient EMS for centralized management and logging.
• Design, implement and troubleshoot site‑to‑site and remote‑access VPNs (IPsec and SSL), handling tunnel, routing and performance issues.
• Configure and tune security profiles such as IPS, antivirus, web filtering, application control, DNS filtering and SSL/TLS inspection.
• Plan and execute firewall migrations and firmware upgrades with minimal disruption, including rollback and post‑change validation.
• Serve as escalation point for network and security incidents, performing packet captures, debug analysis and root‑cause investigations.
• Monitor client environments, respond to security alerts and recommend remediation and hardening measures.
• Produce and maintain documentation: network diagrams, configuration standards, runbooks and change records.
• Participate in client onboarding, security assessments, firewall policy reviews and collaborate with project and account teams on solution design.
• Take part in a rotating on‑call schedule for after‑hours escalations.

Required profile

• 3‑5 years of hands‑on network/security engineering experience, with at least 2 years administering FortiGate firewalls in production.
• Strong knowledge of FortiOS CLI and GUI, including policy design, NAT, routing and diagnostics.
• Experience designing and troubleshooting IPsec and SSL VPNs.
• Proficiency with high‑availability configurations (FGCP) and firmware upgrade cycles.
• Ability to work independently, handle pressure situations and pursue Fortinet certifications.

Required skills

• FortiGate firewalls (physical & virtual)
• FortiOS CLI/GUI
• FortiManager, FortiAnalyzer, FortiSwitch, FortiAP, FortiClient EMS
• IPsec VPN, SSL VPN
• HA clustering (FGCP) and SD‑WAN
• Firewall policy design, NAT, routing
• Packet capture, CLI debug, flow trace
• Firmware upgrade and rollback planning
• Network documentation and diagramming