Lead Network Security Engineer (Palo Alto & Fortinet)

About the role

Rozmith is looking for a senior Lead Network Security Engineer to drive the technical direction of its firewall and network security practice. You will work hands‑on with Palo Alto Networks and Fortinet platforms, while mentoring the engineering team and representing the practice to clients and prospects.

Key responsibilities

• Define and own technical strategy, standards and hardening guides for Palo Alto and Fortinet firewalls.
• Architect, design and lead complex deployments such as PAN‑OS firewalls with Panorama, FortiGate estates with FortiManager/FortiAnalyzer, HA clusters, SD‑WAN and multi‑tenant topologies.
• Lead cross‑vendor migration projects (Palo Alto ↔ Fortinet, legacy to either) including policy translation, cut‑over planning, rollback and validation.
• Design advanced security capabilities – App‑ID, SSL decryption, Threat Prevention on Palo Alto; IPS, web filtering, application control and SSL inspection on FortiOS.
• Serve as tier‑3 escalation point for critical incidents, performing root‑cause analysis with packet captures, flow traces and vendor TAC engagement.
• Mentor junior engineers, conduct design reviews, develop run‑books and guide certification paths.
• Perform firewall policy audits, rule‑base clean‑up and security posture assessments.
• Collaborate with sales and account teams on solution design, scoping, effort estimation and technical presentations.
• Evaluate and drive adoption of new capabilities such as SASE, cloud‑delivered security and automation using APIs and scripting.

Required profile

• Senior‑level professional with extensive hands‑on experience on both Palo Alto Networks and Fortinet firewalls.
• Proven track record of leading large‑scale security architecture projects and migrations.
• Strong analytical skills to troubleshoot complex incidents and perform root‑cause analysis.
• Ability to mentor and develop engineering talent.
• Excellent communication skills for client interaction and internal collaboration.

Required skills

• Palo Alto Networks (PAN‑OS, Panorama)
• Fortinet (FortiGate, FortiManager, FortiAnalyzer, FortiOS)
• HA clustering, SD‑WAN, multi‑site/multi‑tenant design
• App‑ID, SSL decryption, Threat Prevention
• IPS, web filtering, application control, SSL inspection
• SASE, cloud‑delivered security concepts
• Automation via APIs and scripting (e.g., Python, PowerShell)
• Firewall policy auditing and rule‑base optimization