Firewall Engineer

Firewall Engineer

Key accountabilities

• Support the ongoing SD WAN deployment by defining and implementing the necessary changes on the Fortigate firewalls as part of the wider deployment
• Planning and co-ordination of FortiGate implementation into sites including, design, implementation, testing and support transition planning
• Definition and application of approach for firewall log analysis to identify traffic flow between locations
• Working with the NOC and SOC on the implementation of site access controls through the deployed FortiGate technologies.
• Planning and deployment of Fortinet LAN technologies into sites to agreed design patterns
• Provide early life support and to act as the Fortinet SME for NOC and SOC.
• Triaging network related support issues for the project sites
• Fortinet network Knowledge Transfer to Operations Team
• Delivery of the assigned project deliverables and outcomes to agreed time, cost and quality criteria

Experience

The Firewall Tech Engineer should demonstrate the following experience:

• 3+ years of working with Fortinet technologies including, FortiGate firewalls, FortiSwitch, FortiAP, FortiManager and FortiAnalyzer.

• Including using the available tooling to determine site traffic flows, creation and implementation of controls through a 3rdparty NOC and SOC.

• 3+ years of working with Cisco LAN and WLAN technologies to support deployments into mixed technology sites.
• Working with 3rd parties in the implementation of infrastructure projects within a multinational company.
• Co-ordination of local IT teams at a technical level to plan and deliver the technical refreshes.
• Infrastructure change delivery in a multinational organisation in a consistent and timely manner.
• Technical project management experience is desirable but not essential.
• Defining support process for new services and transition process

Technical Skills

CCNP equivalent level with 3 years experience in Fortinet technologies, experience in other network vendors is desirable:

• Firewalling

• Log analysis
• Rule base creation and deployment
• IDS/IPS rule creation and deployment

• SD WAN

• Prior experience of implementing SD WAN within a global organisation.

• Routing

• Static routing
• Dynamic routing

• Switching

• VLANs
• Spanning tree
• Trunking protocols
• Layers 2 security hardening (DHCP snooping etc)
• Good QOS skills

• Security

• Demonstrable understanding of industry security best practices

Desirable Skills

• Experience of Cisco, HP and Aruba technologies
• Experience of working within the constraints of OT technologies
• Project management experience