Network Security Engineer (73943)

Job Description

• Our client is seeking an experienced Network Security Engineer with strong hands-on expertise in Fortinet FortiGate firewalls, FortiOS and enterprise network security
• This role is suited to a technically strong engineer who can troubleshoot complex network and security issues, maintain secure enterprise environments, and contribute to network design, implementation and optimisation.
• You will work across firewall infrastructure, routing, VPN connectivity and network security solutions, combining hands-on technical engineering with customer engagement and infrastructure improvement projects

Key Duties and Responsibilities

• Configure, manage and maintain FortiGate firewalls, firewall policies and security configurations
• Implement and troubleshoot VPNs, including site-to-site IPsec and remote-access connectivity
• Diagnose complex network issues involving routing, switching, TCP/IP, VLANs, BGP and OSPF
• Perform advanced troubleshooting using firewall logs, packet captures, Wireshark and tcpdump
• Support network security implementations, infrastructure upgrades and firewall migrations
• Engage with customers and technical teams to resolve incidents, recommend improvements and maintain secure, reliable network environments
• Maintain technical documentation and participate in scheduled support and on-call arrangements as required
• Maintain accurate network diagrams, firewall configurations, technical documentation, change records and incident reports
• Apply change-management procedures and security best practices when implementing infrastructure changes
• Provide technical guidance to customers and internal stakeholders on network security configurations, troubleshooting and infrastructure improvements
• Participate in scheduled support and on-call arrangements as required

• At least 4 years of relevant enterprise network engineering or network security experience
• Strong hands-on experience with Fortinet FortiGate firewalls and FortiOS
• Good knowledge of firewall policies, NAT, VPNs and network security principles
• Solid understanding of TCP/IP, VLANs, subnetting, routing and switching
• Working knowledge of BGP and OSPF
• Experience using network troubleshooting tools such as Wireshark, tcpdump or equivalent
• Strong analytical, troubleshooting and communication skills

Advantageous

• Experience with Palo Alto firewalls, Cisco Meraki SD-WAN, SIEM platforms or Linux/Unix environments
• Relevant Fortinet or networking certifications
• Experience in a managed services or customer-facing technical environment