Fortinet SD-WAN L3 Engineer

Fortinet SD-WAN L3 Engineer

Location: Pune /Chennai 
Experience: 7+ Years (Hands-on)
Level: High Skilled (L3)

Key Responsibilities

Design & Architecture

• Design Enterprise and Service Provider SD-WAN solutions using Fortinet Secure SD-WAN.


• Prepare HLD, LLD, Migration Strategy, MOP, and Rollback Plans.


• Design Hub-Spoke, Full Mesh, ADVPN, Multi-Region WAN architectures.


• Design WAN segmentation, Security Zones, Application-aware routing policies.


• Define BGP, OSPF, Static Routing, IPSEC VPN, GRE integrations.


• Perform platform sizing, hardware selection, licensing and BOM validation.

Configuration & Build

• Configure FortiGate, FortiManager, FortiAnalyzer, FortiSwitch.


• Configure SD-WAN rules, SLA policies, application steering and traffic shaping.


• Implement HA (A-P/A-A), IPSEC overlays, ADVPN and Security Policies.


• Integrate with Zscaler, Cloud Platforms (AWS/Azure), MPLS and Internet services.


• Perform ZTP deployment and template-based provisioning through FortiManager.

Migration Activities

• Lead SD-WAN transformation and migration projects.


• Perform pre-migration assessment and dependency analysis.


• Execute cutover, WAN migration, firewall migration and routing transitions.


• Manage customer maintenance windows and rollback execution.


• Conduct validation and service acceptance testing.

Post Build & Operations

• Perform RCA for critical incidents and escalations.


• Conduct performance optimization and health assessments.


• Review routing stability, tunnel availability and application performance.


• Support TAC/vendor escalations.


• Lead technical discussions with customer, OEM and delivery teams.

Technical Skills

• FortiGate, FortiManager, FortiAnalyzer


• SD-WAN, SASE, SSE


• BGP, OSPF, MPLS, VRF, QoS


• IPSEC VPN, ADVPN, GRE


• HA Clustering


• Routing & Switching


• Firewall Security Policies


• AWS / Azure Connectivity


• Zscaler Integration


• Wireshark, Packet Analysis

Certifications (Preferred)

• NSE 4 / NSE 5 / NSE 7


• Fortinet Certified Network Security Professional (FCNSP)

CCNP Enterprise / Security